Latest Blogs
Unit 42 Threat Research
Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-...
We detail the observed limited activity regarding authentication bypass vulnerability CVE-2024-0012 affecting specific versions of PAN-OS software, and include ...
Trusted Connections, Hidden Risks: Token Management in the Third-...
Effective OAuth token management is crucial for supply chain security, preventing breaches caused by dormant integrations, insecure storage or lack of rotation....
AdaptixC2: A New Open-Source Framework Leveraged in Real-World At...
AdaptixC2, an open-source C2 framework, is increasingly used in attacks. We discuss its features and potential use case scenarios....
Data Is the New Diamond: Latest Moves by Hackers and Defenders
Unit 42 delves into how cybercriminals are treating stolen data like digital diamonds amid rising attacks and evolving extortion tactics....
Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Model...
Model namespace reuse is a potential security risk in the AI supply chain. Attackers can misuse platforms like Hugging Face for remote code execution....
Why Threat Intelligence: A Conversation With Unit 42 Interns
Discover what it’s like to be a Threat Intelligence intern at Unit 42, from diving into research to tackling real-world cyber threats....
Threat Brief: Salesloft Drift Integration Used To Compromise Sale...
This Threat Brief discusses observations on a campaign leveraging Salesloft Drift integration to exfiltrate data via compromised OAuth credentials....
Data Is the New Diamond: Heists in the Digital Age
Unit 42 explores the similarities between the social engineering and reconnaissance tactics used by financially motivated criminals. ...
Subscribe to the Newsletter!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.