#paloalto

共收录 136 条相关情报。

← 返回所有主题

威胁情报2026-08-11 发布INFO

Kimwolf v7: An Evolution of the Kimwolf Botnet

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-10 发布INFO

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infr

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-07 发布INFO

Inside the Modern SOC: The Identity Front Door

Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-06 发布INFO

ChainDrop: Inside a Self-Propagating npm Worm

Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contra

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #paloalto #apt #unit42

威胁情报2026-08-06 发布INFO

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post T

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-08-04 发布INFO

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-04 发布INFO

Almost Half of Malware Samples Communicate Direct to IP

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures network

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-03 发布INFO

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

威胁情报2026-07-31 发布INFO

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching an

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #paloalto #apt

威胁情报2026-07-23 发布INFO

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-07-17 发布INFO

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escala

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-16 发布INFO

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response R

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-15 发布INFO

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

Palo Alto Networks Unit 42 团队发布了关于 npm 生态系统威胁态势的更新分析报告。报告指出，自 Shai Hulud 事件后，npm 供应链攻击持续演进，出现了可蠕虫化的恶意软件、CI/CD 持久化机制以及多阶段

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #unit42 #paloalto

威胁情报2026-07-15 发布INFO

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 archi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-10 发布INFO

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #apt #paloalto

安全公告2026-07-08 发布INFO

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)

CVE-2026-0279

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

#paloalto #network #firewall

安全公告2026-07-08 发布MEDIUM

CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

CVE-2026-0283

该漏洞（CVE-2026-0283）影响 Palo Alto Networks 的 PAN-OS 操作系统中的 Large Scale VPN（LSVPN）组件。LSVPN 用于大规模 VPN 部署，通常为企业提供安全的远程访问。该漏洞为认

历史摘要 · 未重新核验 · Palo Alto Security Advisories

#paloalto #network #firewall

安全公告2026-07-08 发布LOW

CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass (Severity: LOW)

CVE-2026-0280

CVE-2026-0280 是 Palo Alto Networks PAN-OS 防火墙操作系统中存在的一个 IPv6 防火墙策略绕过漏洞。PAN-OS 是 Palo Alto 防火墙的核心操作系统，负责安全策略执行。该漏洞源于对 IPv

历史摘要 · 未重新核验 · Palo Alto Security Advisories

#paloalto #network #firewall

安全公告2026-07-08 发布MEDIUM

CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

CVE-2026-0284

CVE-2026-0284 是 Palo Alto Networks PAN-OS 操作系统在大规模 VPN（LSVPN）功能中存在的一个 XML 注入漏洞。该漏洞源于对用户提供的 XML 输入未进行充分净化，攻击者可以通过向 LSVPN

历史摘要 · 未重新核验 · Palo Alto Security Advisories

#paloalto #network #firewall

安全公告2026-07-08 发布INFO

CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM)

CVE-2026-0277

CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

#paloalto #network #firewall