Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection Executive SummaryAs cloud environments expand to include human, machine and autono... 2026-9-14 10:0:1 | 阅读: 10 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud identities behavioral security clustering

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE Executive SummaryThis research demonstrates post-exploitation techniques that coul... 2026-9-10 10:0:43 | 阅读: 17 | 收藏 | Unit 42 - unit42.paloaltonetworks.com workload spire spiffe attestation svid

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure Executive SummaryA recent Unit 42 investigation into seemingly low-priority enterp... 2026-9-9 10:0:55 | 阅读: 25 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gate landing cfd loader offerloader

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America Executive SummaryWe have analyzed two ongoing, multi-stage network intrusion and d... 2026-9-3 10:0:58 | 阅读: 23 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers cri 2026 doxa duckdns

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation Unit 42 responded to an incident where a human attacker used frontier AI to breach... 2026-9-2 10:0:46 | 阅读: 36 | 收藏 | Unit 42 - unit42.paloaltonetworks.com agents attacker cloud aml frontier

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams Executive SummaryBetween January and April 2026, we uncovered a coordinated social... 2026-8-31 10:0:36 | 阅读: 22 | 收藏 | Unit 42 - unit42.paloaltonetworks.com onmicrosoft attackers attacker microsoft vishing

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety Introducing a New Angle on LLM SafetyOur previous research on logit-gap steering d... 2026-8-28 22:0:7 | 阅读: 24 | 收藏 | Unit 42 - unit42.paloaltonetworks.com llm neurons aligned security probing

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution Executive SummaryTo assess the impact of AI-enabled malware, we collected and anal... 2026-8-25 10:0:57 | 阅读: 43 | 收藏 | Unit 42 - unit42.paloaltonetworks.com ransomware funksec threats cortex analysis

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain While supply chain threats have been quietly compounding over the past decade, the... 2026-8-21 23:0:21 | 阅读: 30 | 收藏 | Unit 42 - unit42.paloaltonetworks.com developer cloud attackers pipelines software

Identity Abuse Through Trusted Communication Channels Executive SummaryIdentity has become a primary security boundary for most organiza... 2026-8-20 10:0:25 | 阅读: 40 | 收藏 | Unit 42 - unit42.paloaltonetworks.com security attackers phishing malicious

Kimwolf v7: An Evolution of the Kimwolf Botnet Content WarningWe are providing a content warning because the following article co... 2026-8-11 10:0:16 | 阅读: 38 | 收藏 | Unit 42 - unit42.paloaltonetworks.com kimwolf flood c2 apk proxy

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications Executive SummaryAeternum is a recently discovered C++ botnet loader that shifts i... 2026-8-10 22:0:2 | 阅读: 40 | 收藏 | Unit 42 - unit42.paloaltonetworks.com polygon c2 aeternum hxxps blockchain

Inside the Modern SOC: The Identity Front Door The Identity Gap: Why Trust Has Become the New Attack SurfaceIn The 72-Minute Race... 2026-8-7 23:0:1 | 阅读: 36 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers security attacker correlation

ChainDrop: Inside a Self-Propagating npm Worm Executive SummaryA self-propagating npm worm nicknamed ChainDrop infected over 400... 2026-8-6 22:26:39 | 阅读: 42 | 收藏 | Unit 42 - unit42.paloaltonetworks.com worm github cloud c2 chaindrop

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Executive SummaryIt’s three a.m., do you know what your AI agent is doing? Unit 42... 2026-8-6 10:0:49 | 阅读: 54 | 收藏 | Unit 42 - unit42.paloaltonetworks.com malicious security stations jacking cloud

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software Executive SummaryFrontier AI is fundamentally shifting the dynamics of cybersecuri... 2026-8-4 13:0:11 | 阅读: 50 | 收藏 | Unit 42 - unit42.paloaltonetworks.com software frontier autonomous network

Almost Half of Malware Samples Communicate Direct to IP Executive SummaryMalware samples often bypass DNS entirely, communicating directly... 2026-8-4 12:50:53 | 阅读: 53 | 收藏 | Unit 42 - unit42.paloaltonetworks.com zt d2ip c2 network security

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication Executive SummaryThis article analyzes new attack classes against passwordless aut... 2026-8-3 10:0:35 | 阅读: 59 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker passkey cloud

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version Executive SummaryAfter months of dormancy, the attackers behind the XCSSET malware... 2026-7-31 10:0:18 | 阅读: 39 | 收藏 | Unit 42 - unit42.paloaltonetworks.com xcsset v40 chrome c2 remote

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks Executive SummaryUnit 42 identified an AI-enabled autonomous hacking campaign carr... 2026-7-30 10:0:52 | 阅读: 60 | 收藏 | Unit 42 - unit42.paloaltonetworks.com autonomous 2026 deepseek n8n hermes