#unit42

共收录 67 条相关情报。

威胁情报2026-07-16 发布INFO

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response R

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-15 发布INFO

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

Palo Alto Networks Unit 42 团队发布了关于 npm 生态系统威胁态势的更新分析报告。报告指出，自 Shai Hulud 事件后，npm 供应链攻击持续演进，出现了可蠕虫化的恶意软件、CI/CD 持久化机制以及多阶段

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #unit42 #paloalto

威胁情报2026-07-15 发布INFO

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 archi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-10 发布INFO

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #apt #paloalto

威胁情报2026-07-07 发布INFO

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #apt #unit42

威胁情报2026-07-02 发布INFO

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn re

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-07-01 发布INFO

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #unit42 #paloalto #malware

威胁情报2026-06-25 发布INFO

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolk

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #paloalto #malware #unit42

威胁情报2026-06-23 发布INFO

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #apt #paloalto #malware

威胁情报2026-06-22 发布INFO

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data s

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-06-16 发布INFO

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #unit42 #apt #malware

威胁情报2026-06-15 发布INFO

Inside the Modern SOC: The 72-Minute Race

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed gap with Unit 4

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #unit42 #apt #malware

威胁情报2026-06-12 发布INFO

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating syst

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #unit42 #malware #paloalto

威胁情报2026-06-11 发布INFO

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

威胁情报2026-06-09 发布INFO

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulatio

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #unit42 #malware

威胁情报2026-06-08 发布INFO

When “Hi, This Is IT” Comes Through Microsoft Teams

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to stre

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #unit42 #malware

威胁情报2026-06-02 发布INFO

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #unit42 #paloalto #malware

威胁情报2026-05-27 发布INFO

Out of the Crypt: The Evolving Cyber Extortion Economy

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models ad

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-05-22 发布INFO

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sec

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #paloalto #apt #unit42

威胁情报2026-05-22 发布INFO

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malici

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #paloalto #apt #unit42