Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy Executive SummaryWe conducted this research in close partnership with Siemens, ref... 2026-7-17 10:0:24 | 阅读: 15 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attacker siemens security malicious xz

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 0 | 收藏 | Unit 42 - unit42.paloaltonetworks.com richard defenders attackers andy

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report Unit 42’s 2026 Global Incident Response Report offers frontline intelligence drawn... 2026-7-16 23:0:59 | 阅读: 6 | 收藏 | Unit 42 - unit42.paloaltonetworks.com defenders richard andy attackers

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development Executive SummaryWe identified a previously undocumented modular internet-of-thing... 2026-7-15 10:0:54 | 阅读: 27 | 收藏 | Unit 42 - unit42.paloaltonetworks.com tuxbot c2 llm developer statically

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Executive SummaryThe Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS... 2026-7-10 22:0:39 | 阅读: 23 | 收藏 | Unit 42 - unit42.paloaltonetworks.com gentlemen claimed 2026 security ransomware

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation Executive SummaryIn April 2026, Unit 42 researchers identified a financially motiv... 2026-7-7 22:0:21 | 阅读: 17 | 收藏 | Unit 42 - unit42.paloaltonetworks.com vidar stealer xmrig loader windows

How We Added WebAuthn to a Browser-Based RDP Client The PitchTL;DR: We built the first RDP client outside of Windows to support WebAut... 2026-7-2 22:0:39 | 阅读: 28 | 收藏 | Unit 42 - unit42.paloaltonetworks.com windows webauthn microsoft

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Executive SummaryUnit 42 researchers found that large language models (LLMs) consi... 2026-7-1 01:0:11 | 阅读: 42 | 收藏 | Unit 42 - unit42.paloaltonetworks.com phantom llm malicious squatting

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure Executive SummaryThroughout 2025, we observed a cluster of activity targeting gove... 2026-6-25 22:0:52 | 阅读: 24 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers tinyrct sta c2 1062

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat Executive SummaryOpenClaw is an AI agent that executes third-party skills from Cla... 2026-6-23 22:0:51 | 阅读: 33 | 收藏 | Unit 42 - unit42.paloaltonetworks.com skill malicious security clawhub agentic

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Executive SummaryWe recently identified a bucket hijacking technique impacting mul... 2026-6-22 22:0:4 | 阅读: 27 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud attacker hijacking security buckets

Threat Brief: Mitigating Large-Scale Credential Attacks Unit 42 is aware of a large-scale password spraying and credential theft campaign (... 2026-6-20 02:5:33 | 阅读: 34 | 收藏 | Unit 42 - unit42.paloaltonetworks.com alto palo spraying sophos

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE Executive SummaryWe discovered a vulnerability in the Google Cloud Vertex AI softw... 2026-6-16 10:0:29 | 阅读: 41 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud victim attacker vertex staging

Inside the Modern SOC: The 72-Minute Race The Speed Gap: Where Strategy Meets RealityThis marks the beginning of our series,... 2026-6-15 23:0:19 | 阅读: 26 | 收藏 | Unit 42 - unit42.paloaltonetworks.com attackers security workflows gap

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered Surfacing a New ArtifactForensic examiners are constantly hunting for data that re... 2026-6-12 22:0:14 | 阅读: 31 | 收藏 | Unit 42 - unit42.paloaltonetworks.com artifact biome menuitem segb trash

Trust No Skill: Integrity Verification for AI Agent Supply Chains Executive SummaryAI agents now extend their capabilities by installing third-party... 2026-6-11 10:0:24 | 阅读: 36 | 收藏 | Unit 42 - unit42.paloaltonetworks.com skill biv adversarial llm chains

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility Executive SummaryCloud logging services provide comprehensive visibility into acti... 2026-6-9 22:0:21 | 阅读: 32 | 收藏 | Unit 42 - unit42.paloaltonetworks.com cloud attacker cloudtrail security trail

When “Hi, This Is IT” Comes Through Microsoft Teams "Hi, IT Department Here!"It's Friday afternoon. The week has been busy, and everyo... 2026-6-8 23:0:45 | 阅读: 28 | 收藏 | Unit 42 - unit42.paloaltonetworks.com microsoft phishing chats unmanaged

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 Palo Alto Networks Unit 42 has observed active exploitation of PAN-OS vulnerability... 2026-6-5 14:5:42 | 阅读: 34 | 收藏 | Unit 42 - unit42.paloaltonetworks.com palo 2026 alto security

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor Executive SummaryWe are tracking an increasingly widespread malvertising campaign... 2026-6-2 10:0:31 | 阅读: 58 | 收藏 | Unit 42 - unit42.paloaltonetworks.com malicious attackers brain