▣ IT SECURITY · — · rss

Palo Alto Unit42

Fetch interval: 12h

Items

Trust

80/100

Last activity

7/10/2026

Open original site ↗RSS ↗

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel evasion layer combination. The post Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit427d07/02

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn redirection. The post How We Added WebAuthn to a Browser-Based RDP Client appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit429d07/01

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more. The post Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4214d06/25

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolkit, including custom TinyRCT backdoor. The post CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4216d06/23

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and execute agentic financial fraud. The post OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4217d06/22

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs. The post The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4220d06/20

Threat Brief: Mitigating Large-Scale Credential Attacks

We provide guidance for preparing for and mitigating large-scale credential attacks, focusing on recent campaigns targeting security vendors' devices. The post Threat Brief: Mitigating Large-Scale Credential Attacks appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4224d06/16

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4224d06/15

Inside the Modern SOC: The 72-Minute Race

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed gap with Unit 42's AI-driven automation, threat hunting, MDR and Managed XSIAM. The post Inside the Modern SOC: The 72-Minute Race appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4227d06/12

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating system. Learn more here. The post Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4229d06/11

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi-stage attack chains. The post Trust No Skill: Integrity Verification for AI Agent Supply Chains appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4230d06/09

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulation and defense evasion. The post Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4231d06/08

When “Hi, This Is IT” Comes Through Microsoft Teams

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to strengthen your organization's security. The post When “Hi, This Is IT” Comes Through Microsoft Teams appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4235d06/05

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4238d06/02

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell, built using the Flutter framework. The post Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4243d05/28

2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

The 2026 World Cup presents major cyber risks from ransomware groups, state-aligned actors, and other groups targeting critical infrastructure. Learn more here. The post 2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4243d05/27

Out of the Crypt: The Evolving Cyber Extortion Economy

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models advance. The post Out of the Crypt: The Evolving Cyber Extortion Economy appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4249d05/22

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campaigns. The post Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns appeared first on Unit 42.

cybersecurity

Palo Alto Unit4249d05/22

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious use. The post Paved With Intent: ROADtools and Nation-State Tactics in the Cloud appeared first on Unit 42.

cybersecurity

Palo Alto Unit4250d05/21

The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21)

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21) appeared first on Unit 42.

cybersecurity

Palo Alto Unit4251d05/20

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealthy payloads to targets. The post Tracking TamperedChef Clusters via Certificate and Code Reuse appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4256d05/15

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking to compromise data. The post Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4259d05/11

Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

Unit 42 analyzes AD CS exploitation through template misconfigurations and shadow credential misuse while offering behavioral detection for defenders. The post Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4264d05/07

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

Unit 42 details CVE-2026-0300, a buffer overflow vulnerability in the PAN-OS User-ID Authentication Portal. Read now for details. The post Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4265d05/05

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions of systems. Read our analysis. The post Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4269d05/01

Essential Data Sources for Detection Beyond the Endpoint

Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details here. The post Essential Data Sources for Detection Beyond the Endpoint appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4270d04/30

That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, and exfiltrate passwords. Protect your browser. The post That AI Extension Helping You Write Emails? It’s Reading Them First appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4276d04/24

TGR-STA-1030: New Activity in Central and South America

Unit 42 research reports that TGR-STA-1030 remains an active threat, particularly in Central and South America. The post TGR-STA-1030: New Activity in Central and South America appeared first on Unit 42.

borderlinecybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4277d04/23

Frontier AI and the Future of Defense: Your Top Questions Answered

What are the next steps for security leaders in this new age of frontier AI? We answer the top 10 questions customers are asking. The post Frontier AI and the Future of Defense: Your Top Questions Answered appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Palo Alto Unit4278d04/23

Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System

Unit 42 reveals how multi-agent AI systems can autonomously attack cloud environments. Learn critical insights and vital lessons for proactive security. The post Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System appeared first on Unit 42.

cybersecurity · government-security · unknown-it-category-15

Trust

Reputable· 80/100

Recent crawls

5/24/26, 12:42 AM	ok	0/15
5/24/26, 12:42 AM	ok	0/15
5/23/26, 11:09 PM	ok	0/15
5/23/26, 11:09 PM	ok	0/15
5/23/26, 11:02 PM	ok	0/15
5/23/26, 11:02 PM	ok	0/15
5/23/26, 12:42 PM	ok	0/15
5/23/26, 12:42 PM	ok	0/15
5/23/26, 6:53 AM	ok	0/15
5/23/26, 6:53 AM	ok	0/15

Health checks

7/10/26, 3:23 AMOK45 ms

7/10/26, 2:23 AMOK56 ms

7/10/26, 1:23 AMOK57 ms

7/10/26, 12:23 AMOK62 ms

7/9/26, 11:23 PMOK54 ms

7/9/26, 10:23 PMOK61 ms

7/9/26, 9:23 PMOK95 ms

7/9/26, 8:23 PMOK58 ms

7/9/26, 7:23 PMOK50 ms

7/9/26, 6:23 PMOK68 ms

7/9/26, 5:23 PMOK55 ms

7/9/26, 4:23 PMOK42 ms

7/9/26, 3:23 PMOK75 ms

7/9/26, 2:23 PMOK48 ms

7/9/26, 1:23 PMOK48 ms

7/9/26, 12:23 PMOK38 ms

7/9/26, 11:23 AMOK41 ms

7/9/26, 10:23 AMOK48 ms

7/9/26, 9:23 AMOK125 ms

7/9/26, 8:23 AMOK46 ms

7/9/26, 7:23 AMOK48 ms

7/9/26, 6:23 AMOK112 ms

7/9/26, 5:23 AMOK56 ms

7/9/26, 4:23 AMOK77 ms

7/9/26, 3:23 AMOK45 ms

7/9/26, 2:23 AMOK71 ms

7/9/26, 1:23 AMOK58 ms

7/9/26, 12:23 AMOK58 ms

7/8/26, 11:23 PMOK61 ms

7/8/26, 10:23 PMOK66 ms