Almost Half of Malware Samples Communicate Direct to IP Executive SummaryMalware samples often bypass DNS entirely, communicating directly... 2026-8-4 12:50:53 | 阅读: 59 | 收藏 | Unit 42 - unit42.paloaltonetworks.com zt d2ip c2 network security

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication Executive SummaryThis article analyzes new attack classes against passwordless aut... 2026-8-3 10:0:35 | 阅读: 68 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker passkey cloud

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version Executive SummaryAfter months of dormancy, the attackers behind the XCSSET malware... 2026-7-31 10:0:18 | 阅读: 51 | 收藏 | Unit 42 - unit42.paloaltonetworks.com xcsset v40 chrome c2 remote

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks Executive SummaryUnit 42 identified an AI-enabled autonomous hacking campaign carr... 2026-7-30 10:0:52 | 阅读: 69 | 收藏 | Unit 42 - unit42.paloaltonetworks.com autonomous 2026 deepseek n8n hermes

Russian Global Webmail Espionage Executive SummaryUnit 42 has observed a persistent cyberespionage campaign we trac... 2026-7-23 14:10:53 | 阅读: 47 | 收藏 | Unit 42 - unit42.paloaltonetworks.com zimbra 1114 sta security webmail

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy Executive SummaryWe conducted this research in close partnership with Siemens, ref... 2026-7-17 10:0:24 | 阅读: 56 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker siemens security malicious xz

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 35 | 收藏 | Unit 42 - unit42.paloaltonetworks.com richard defenders attackers andy

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 46 | 收藏 | Unit 42 - unit42.paloaltonetworks.com defenders richard andy attackers

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development Executive SummaryWe identified a previously undocumented modular internet-of-thing... 2026-7-15 10:0:54 | 阅读: 74 | 收藏 | Unit 42 - unit42.paloaltonetworks.com tuxbot c2 llm developer statically

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Executive SummaryThe Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS... 2026-7-10 22:0:39 | 阅读: 64 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gentlemen claimed 2026 security ransomware

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation Executive SummaryIn April 2026, Unit 42 researchers identified a financially motiv... 2026-7-7 22:0:21 | 阅读: 49 | 收藏 | Unit 42 - unit42.paloaltonetworks.com vidar stealer xmrig loader windows

How We Added WebAuthn to a Browser-Based RDP Client The PitchTL;DR: We built the first RDP client outside of Windows to support WebAut... 2026-7-2 22:0:39 | 阅读: 61 | 收藏 | Unit 42 - unit42.paloaltonetworks.com windows webauthn microsoft

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Executive SummaryUnit 42 researchers found that large language models (LLMs) consi... 2026-7-1 01:0:11 | 阅读: 83 | 收藏 | Unit 42 - unit42.paloaltonetworks.com phantom llm malicious squatting

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure Executive SummaryThroughout 2025, we observed a cluster of activity targeting gove... 2026-6-25 22:0:52 | 阅读: 59 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers tinyrct sta c2 1062

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat Executive SummaryOpenClaw is an AI agent that executes third-party skills from Cla... 2026-6-23 22:0:51 | 阅读: 59 | 收藏 | Unit 42 - unit42.paloaltonetworks.com skill malicious security clawhub agentic

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Executive SummaryWe recently identified a bucket hijacking technique impacting mul... 2026-6-22 22:0:4 | 阅读: 52 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud attacker hijacking security buckets

Threat Brief: Mitigating Large-Scale Credential Attacks Unit 42 is aware of a large-scale password spraying and credential theft campaign (... 2026-6-20 02:5:33 | 阅读: 72 | 收藏 | Unit 42 - unit42.paloaltonetworks.com alto palo spraying sophos

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE Executive SummaryWe discovered a vulnerability in the Google Cloud Vertex AI softw... 2026-6-16 10:0:29 | 阅读: 66 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud victim attacker vertex staging

Inside the Modern SOC: The 72-Minute Race The Speed Gap: Where Strategy Meets RealityThis marks the beginning of our series,... 2026-6-15 23:0:19 | 阅读: 47 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers security workflows gap

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered Surfacing a New ArtifactForensic examiners are constantly hunting for data that re... 2026-6-12 22:0:14 | 阅读: 58 | 收藏 | Unit 42 - unit42.paloaltonetworks.com artifact biome menuitem segb trash