Latest Blogs
Unit 42 Threat Research
When an Attacker Meets a Group of Agents: Navigating Amazon Bedro...
Unit 42 research on multi-agent AI systems on Amazon Bedrock reveals new attack surfaces and prompt injection risks. Learn how to secure your AI applications....
Threat Brief: Widespread Impact of the Axios Supply Chain Attack
Unit 42 discusses the supply chain attack targeting Axios. Learn about the full attack chain, from the dropper to forensic cleanup....
Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain At...
TeamPCP continues its string of supply chain attacks, and announces a partnership with Vect ransomware group....
Double Agents: Exposing Security Blind Spots in GCP Vertex AI
Unit 42 uncovers a "double agent" flaw in Google Cloud's Vertex AI, demonstrating how overprivileged AI agents can compromise cloud environments....
Threat Brief: March 2026 Escalation of Cyber Risk Related to Iran...
Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for...
Converging Interests: Analysis of Threat Clusters Targeting a Sou...
Unit 42 uncovers multiple clusters of cyberespionage targeting a Southeast Asian government organization with USBFect, RATs and loaders....
Threat Brief: Recruiting Scheme Impersonating Palo Alto Networks ...
Unit 42 identifies a recruitment phishing campaign targeting senior professionals via impersonation and fraudulent resume fees....
Google Cloud Authenticator: The Hidden Mechanisms of Passwordless...
Explore Google’s synced passkey architecture. Unit 42 details its mechanisms, key management, and secure communication in passwordless systems."...
Subscribe to the Newsletter!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.