#unit42

共收录 67 条相关情报。

威胁情报2026-09-10 发布INFO

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest c

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #paloalto #unit42 #malware

威胁情报2026-09-03 发布INFO

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow de

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #paloalto #apt

威胁情报2026-09-02 发布INFO

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Using autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address a

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #paloalto #malware #unit42

威胁情报2026-08-31 发布INFO

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise dom

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #malware #unit42 #paloalto

威胁情报2026-08-28 发布INFO

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, m

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-08-25 发布INFO

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-a

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #apt #paloalto

威胁情报2026-08-21 发布INFO

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #malware #unit42

威胁情报2026-08-20 发布INFO

Identity Abuse Through Trusted Communication Channels

Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discove

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #malware #paloalto #unit42

威胁情报2026-08-18 发布INFO

Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Ent

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #apt #unit42

威胁情报2026-08-11 发布INFO

Kimwolf v7: An Evolution of the Kimwolf Botnet

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-10 发布INFO

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infr

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-07 发布INFO

Inside the Modern SOC: The Identity Front Door

Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-06 发布INFO

ChainDrop: Inside a Self-Propagating npm Worm

Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contra

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #paloalto #apt #unit42

威胁情报2026-08-06 发布INFO

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post T

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-08-04 发布INFO

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-04 发布INFO

Almost Half of Malware Samples Communicate Direct to IP

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures network

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-03 发布INFO

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

威胁情报2026-07-31 发布INFO

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching an

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #paloalto #apt

威胁情报2026-07-23 发布INFO

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-07-17 发布INFO

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escala

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto