Latest Blogs
Unit 42 Threat Research
Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-...
We detail the observed limited activity regarding authentication bypass vulnerability CVE-2024-0012 affecting specific versions of PAN-OS software, and include ...
Threat Brief: Escalation of Cyber Risk Related to Iran (Updated J...
Unit 42 details recent Iranian cyberattack activity, sharing direct observations. Tactical and strategic recommendations are provided for defenders....
Cybercriminals Abuse Open-Source Tools To Target Africa’s Financi...
Cybercriminals are targeting financial organizations across Africa, potentially acting as initial access brokers selling data on the dark web....
Resurgence of the Prometei Botnet
We identified a resurgence of the Prometei botnet's Linux variant. Our analysis tracks the activity of this cryptominer and its new features....
Exploring a New KimJongRAT Stealer Variant and Its PowerShell Imp...
We analyze two new KimJongRAT stealer variants, combining new research with existing knowledge. One uses a Portable Executable (PE) file and the other PowerShel...
Serverless Tokens in the Cloud: Exploitation and Detections
Understand the mechanics of serverless authentication: three simulated attacks across major CSPs offer effective approaches for application developers....
JSFireTruck: Exploring Malicious JavaScript Using JSF*ck as an Ob...
In an extensive campaign affecting 270k webpages, compromised websites were injected with the esoteric JavaScript programming style JSF*ck to redirect users to ...
The Evolution of Linux Binaries in Targeted Cloud Operations
Using data from machine learning tools, we predict a surge in cloud attacks leveraging reworked Linux Executable and Linkage Format (ELF) files....
Subscribe to the Newsletter!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.