[![Logo](https://www.paloaltonetworks.com/wp-content/uploads/2021/07/PANW_Parent.png)](https://www.paloaltonetworks.com/) [![Unit42 Logo](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/unit42-logo-white.svg)](https://unit42.paloaltonetworks.com/) Menu * [Tools](https://unit42.paloaltonetworks.com/tools/) * [ATOMs](https://unit42.paloaltonetworks.com/atoms/) * [Security Consulting](https://www.paloaltonetworks.com/unit42) * [About Us](https://unit42.paloaltonetworks.com/about-unit-42/) * [**Under Attack?**](https://start.paloaltonetworks.com/contact-unit42.html) ![Pictorial representation of attackers using AI tools to target Latin American organizations. A vibrant cityscape with silhouettes of numerous people walking along a bustling street. The scene is illuminated by bright urban lights and digital-like particles, creating a dynamic and futuristic atmosphere.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/09/AdobeStock_768915868-2-1-1476x700.jpg) CRITICAL THREAT [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg)Threat Research](https://unit42.paloaltonetworks.com/category/threat-research/) September 3, 2026 [Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America \=============================================================================](https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/) [Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations.](https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/ "Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations.") [Uncover How Threat Actors Leverage LLMs for Network Exfiltration ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/ "Read now link") ![Right arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/slider-right-arrow.svg) ![Right arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/slider-right-arrow.svg) ![Pictorial representation of attackers using AI tools to target Latin American organizations. A vibrant cityscape with silhouettes of numerous people walking along a bustling street. The scene is illuminated by bright urban lights and digital-like particles, creating a dynamic and futuristic atmosphere.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/09/AdobeStock_768915868-2-1-786x373.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg)Threat Research](https://unit42.paloaltonetworks.com/category/threat-research/) September 3, 2026 [Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America \-----------------------------------------------------------------------------](https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/ "Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America") ![Pictorial representation of a woman in glasses viewing a reflection of a monitor screen. The reflection features multicolored numbers, arrows, and graphs.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/09/07_Opinion_Overview_1920x900-1-786x368.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/08/Insights-icon-white.svg)Insights](https://unit42.paloaltonetworks.com/category/insights/) September 2, 2026 [An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation \-----------------------------------------------------------](https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ "An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation") ![Pictorial representation of vishing campaigns in Microsoft Teams. A digital image of a skull formed by blue binary code on a black background, with scattered ones and zeros and digital noise, symbolizes how stealthy prompt injection attacks can exploit AI logic to bypass security controls.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/01_Malware_Category_1920x900-5-786x368.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat-research.svg)Threat Research](https://unit42.paloaltonetworks.com/category/threat-research/) August 31, 2026 [Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams \--------------------------------------------------------------------------](https://unit42.paloaltonetworks.com/spring-ring-voice-phishing-campaigns/ "Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams") Explore all the articles at the push of a button [View all articles](https://www.paloaltonetworks.com/unit-42-all-articles/?ts=markdown "view all articles") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat.svg) Threat Research ![Down arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/down-arrow.svg) * [![](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-threat.svg) Threat Research](#threat-research "Threat Research") * [![](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-cyberthreat.svg) High Profile Threats](#top-cyberthreats "High Profile Threats") * [![](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/08/insights-icon-black.svg) Insights](#insights "Insights") * [![](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-reports.svg) Trend Reports](#trend-reports "Trend Reports") * [![Image representing threat actor groups, showing the tracking of constellations in alignment with the Unit 42 threat actor group naming system](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/APT-icon-resized.svg) Threat Actor Groups](#threat-actor-groups "Threat Actor Groups") ### Access the latest threat research [View all research ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://www.paloaltonetworks.com/category/threat-research/?ts=markdown "View all research") ![Pictorial representation of AI-enabled malware. A vibrant digital interface displaying various icons and graphs, resembling a futuristic network or data analysis dashboard. The scene is illuminated with glowing lights and patterns.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/AdobeStock_1270203474-2-1-786x368.png) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) August 25, 2026 [#### The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution](https://unit42.paloaltonetworks.com/ai-enabled-malware-analysis/ "The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution") * [Backdoor](https://unit42.paloaltonetworks.com/tag/backdoor/ "backdoor") * [Bitcoin](https://unit42.paloaltonetworks.com/tag/bitcoin/ "Bitcoin") * [DLL hijacking](https://unit42.paloaltonetworks.com/tag/dll-hijacking/ "DLL hijacking") [Read now](https://unit42.paloaltonetworks.com/ai-enabled-malware-analysis/ "Read More about it") ![Pictorial representation of identity abuse through trusted communication channels. Close-up view of a digital screen displaying a glitched and pixelated image of a skull-like shape.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/02_Malware_Category_1920x900-2-786x368.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) August 20, 2026 [#### Identity Abuse Through Trusted Communication Channels](https://unit42.paloaltonetworks.com/communication-channel-identity-risks/ "Identity Abuse Through Trusted Communication Channels") * [Authentication](https://unit42.paloaltonetworks.com/tag/authentication/ "authentication") * [Identity theft](https://unit42.paloaltonetworks.com/tag/identity-theft/ "identity theft") * [Malware](https://unit42.paloaltonetworks.com/tag/malware/ "malware") [Read now](https://unit42.paloaltonetworks.com/communication-channel-identity-risks/ "Read More about it") ![Pictorial representation of Kimwolf botnet malware family. Digital screen with a warning sign reading "Malware." The background features lines of computer code and graphics, creating a sense of cybersecurity threat.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/07_Malware_Category_1920x900-3-786x368.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) August 11, 2026 [#### Kimwolf v7: An Evolution of the Kimwolf Botnet](https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/ "Kimwolf v7: An Evolution of the Kimwolf Botnet") * [Android APK](https://unit42.paloaltonetworks.com/tag/android-apk/ "Android APK") * [Ethereum](https://unit42.paloaltonetworks.com/tag/ethereum/ "Ethereum") * [HTTP](https://unit42.paloaltonetworks.com/tag/http/ "HTTP") [Read now](https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/ "Read More about it") ### Understand high profile cyberthreats and vulnerabilities [View high profile threats ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://www.paloaltonetworks.com/category/top-threats?ts=markdown "View high profile threats") ![Pictorial representation of ChainDrop, a self-propagating npm worm. An artistic depiction of a digital workspace featuring an open laptop with a red virus on the screen.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/03_Malware_Category_1920x900-7.jpg) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/top-threats.svg)High Profile Threats](https://unit42.paloaltonetworks.com/category/top-cyberthreats/) August 6, 2026 [#### ChainDrop: Inside a Self-Propagating npm Worm](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ "ChainDrop: Inside a Self-Propagating npm Worm") [Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing.](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/) [Read now](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ "ChainDrop: Inside a Self-Propagating npm Worm") [![Pictorial representation of large-scale credential attacks. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/06/07_Vulnerabilities_1920x900-1-300x300.jpg)](https://unit42.paloaltonetworks.com/large-scale-credential-attacks/ "Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/08/icon_General.svg)General](https://unit42.paloaltonetworks.com/category/general/) August 18, 2026 [#### Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)](https://unit42.paloaltonetworks.com/large-scale-credential-attacks/ "Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)") * [Credential theft](https://unit42.paloaltonetworks.com/tag/credential-theft/ "credential theft") [Read now](https://unit42.paloaltonetworks.com/large-scale-credential-attacks/ "Read now") [![Pictorial representation of ChainDrop, a self-propagating npm worm. An artistic depiction of a digital workspace featuring an open laptop with a red virus on the screen.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/03_Malware_Category_1920x900-7-300x300.jpg)](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ "ChainDrop: Inside a Self-Propagating npm Worm") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) August 6, 2026 [#### ChainDrop: Inside a Self-Propagating npm Worm](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ "ChainDrop: Inside a Self-Propagating npm Worm") * [Blockchain](https://unit42.paloaltonetworks.com/tag/blockchain/ "blockchain") * [ChainDrop](https://unit42.paloaltonetworks.com/tag/chaindrop/ "ChainDrop") * [Claude code](https://unit42.paloaltonetworks.com/tag/claude-code/ "Claude code") [Read now](https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ "Read now") [![Pictorial representation of the npm packages supply chain attack. Screen displaying code with a prominent alert symbol and the words 'VIRUS DETECTED' highlighted in red.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/05_Malware_Category_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/ "The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) July 15, 2026 [#### The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)](https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/ "The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)") * [Credential Harvesting](https://unit42.paloaltonetworks.com/tag/credential-harvesting/ "Credential Harvesting") * [GitHub](https://unit42.paloaltonetworks.com/tag/github/ "GitHub") * [Npm packages](https://unit42.paloaltonetworks.com/tag/npm-packages/ "npm packages") [Read now](https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/ "Read now") [![Pictorial representation of PAN-OS CVE-2026-0257. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/06/07_Vulnerabilities_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/ "Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg)Vulnerabilities](https://unit42.paloaltonetworks.com/category/vulnerabilities/) June 9, 2026 [#### Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257](https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/ "Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257") * [CVE-2026-0257](https://unit42.paloaltonetworks.com/tag/cve-2026-0257/ "CVE-2026-0257") * [Vulnerability](https://unit42.paloaltonetworks.com/tag/vulnerability/ "vulnerability") [Read now](https://unit42.paloaltonetworks.com/active-exploitation-of-pan-os-cve-2026-0257/ "Read now") [![Pictorial representation of CVE-2026-30300. Digital illustration of a map of North America with interconnected glowing lines and dots symbolizing network connections across the continent.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/05/06_Vulnerabilities_1920x900-3-1-300x300.jpg)](https://unit42.paloaltonetworks.com/captive-portal-zero-day/ "Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg)Vulnerabilities](https://unit42.paloaltonetworks.com/category/vulnerabilities/) May 6, 2026 [#### Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution](https://unit42.paloaltonetworks.com/captive-portal-zero-day/ "Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution") * [CVE-2026-0300](https://unit42.paloaltonetworks.com/tag/cve-2026-0300/ "CVE-2026-0300") * [EarthWorm](https://unit42.paloaltonetworks.com/tag/earthworm/ "EarthWorm") * [PAN-OS](https://unit42.paloaltonetworks.com/tag/pan-os/ "PAN-OS") [Read now](https://unit42.paloaltonetworks.com/captive-portal-zero-day/ "Read now") [![Pictorial representation of a severe Linux vulnerability. Close-up of a woman wearing glasses and focusing intently on a computer screen.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/05/05_Vulnerabilities_1920x900-2-1-300x300.jpg)](https://unit42.paloaltonetworks.com/cve-2026-31431-copy-fail/ "Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg)Vulnerabilities](https://unit42.paloaltonetworks.com/category/vulnerabilities/) May 5, 2026 [#### Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years](https://unit42.paloaltonetworks.com/cve-2026-31431-copy-fail/ "Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years") * [Containers](https://unit42.paloaltonetworks.com/tag/containers/ "Containers") * [CVE-2026-31431](https://unit42.paloaltonetworks.com/tag/cve-2026-31431/ "CVE-2026-31431") * [Kubernetes](https://unit42.paloaltonetworks.com/tag/kubernetes/ "Kubernetes") [Read now](https://unit42.paloaltonetworks.com/cve-2026-31431-copy-fail/ "Read now") [#### Industrial \& Critical Infrastructure Security](https://unit42.paloaltonetworks.com/threat-bulletin/ot-threat-research-arc/ "Industrial & Critical Infrastructure Security") Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these changes are reshaping the threat landscape is essential to strengthening operational resilience and preparing for what's next. * Expanding attack surface: Greater connectivity across industrial environments creates new pathways for cyber risk. * Real-world impact: Cyber incidents can affect safety, production, and business continuity, not just data. * What's changing: AI, automation, and IT/OT convergence are reshaping how organizations approach industrial security. [Explore OT Threat Research](https://unit42.paloaltonetworks.com/threat-bulletin/ot-threat-research-arc/ "Explore OT Threat Research") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/07/unit-42_ARC_promo-2_510x491.jpg) ### Insights -- Explore fresh perspectives from Unit 42 [Insights ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://www.paloaltonetworks.com/category/insights/?ts=markdown "Insights") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/12_Cloud_cybersecurity_research_Overview_1920x900.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/08/Insights-Template-for-More-Portrait-Images-4.png) Matt Brady #### Cybercrime, Retail and Hospitality [Read more from Matt Brady](https://unit42.paloaltonetworks.com/author/matt-brady/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/03/04_Hactivism_Overview_1920x900.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/Moore-Insights.png) Justin Moore #### Threat Intelligence, Cyberthreats [Read more from Justin Moore](https://unit42.paloaltonetworks.com/author/justin-moore/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/01/14_Overview_1920x900.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/Rubin_Insights-Headshot.png) Sam Rubin [Read more from Sam Rubin](https://unit42.paloaltonetworks.com/author/sam-rubin/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/04_Listicle_Overview_1920x900.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/Whitbey-Insights.png) Kathi Whitbey #### Cyber Threat Alliance [Read more from Kathi Whitbey](https://unit42.paloaltonetworks.com/author/kathi-whitbey/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/AdobeStock_739390615-1.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/07/Piazza-Insights-Headshot.jpg) Andy Piazza [Read more from Andy Piazza](https://unit42.paloaltonetworks.com/author/andy-piazza/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/10_Myth-Busting_Category_1505x922.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/Insights-Spisak.jpg) Michael Spisak [Read more from Michael Spisak](https://unit42.paloaltonetworks.com/author/michael-spisak/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/03_Cloud_cybersecurity_research_Category_1505x922.jpg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/Insights-Kate.jpg) Kate Middagh #### AI Vibe Coding [Read more from Kate Middagh](https://unit42.paloaltonetworks.com/author/kate-middagh/ "Learn more") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/12/AdobeStock_992950050-scaled.jpeg) ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2023/08/Margaret-Kelley-Insights.png) Margaret Kelley [Read more from Margaret Kelley](https://unit42.paloaltonetworks.com/author/margaret-kelley/ "Learn more") Recent Articles ## Insights -- Explore fresh perspectives from Unit 42 [![Pictorial representation of a woman in glasses viewing a reflection of a monitor screen. The reflection features multicolored numbers, arrows, and graphs.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/09/07_Opinion_Overview_1920x900-1-300x300.jpg)](https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ "An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/11/Cruz-Insights.png)Renzon Cruz](https://unit42.paloaltonetworks.com/author/renzon-cruz/) [#### An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation](https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ "An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation") * [Agentic AI](https://unit42.paloaltonetworks.com/tag/agentic-ai/ "Agentic AI") * [Frontier AI](https://unit42.paloaltonetworks.com/tag/frontier-ai/ "Frontier AI") [Read now](https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ "Read now") [![New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, multi-layered security.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/02_General_Overview_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/perturbation-probing-llm-safety/ "Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/12/Insights_headshot-placeholder.jpg)Tony Li](https://unit42.paloaltonetworks.com/author/tony-li/) [#### Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety](https://unit42.paloaltonetworks.com/perturbation-probing-llm-safety/ "Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety") * [AI](https://unit42.paloaltonetworks.com/tag/ai/ "AI") * [Jailbreak](https://unit42.paloaltonetworks.com/tag/jailbreak/ "Jailbreak") * [LLM](https://unit42.paloaltonetworks.com/tag/llm/ "LLM") [Read now](https://unit42.paloaltonetworks.com/perturbation-probing-llm-safety/ "Read now") [![Pictorial representation of a male individual viewing multiple monitor screens. The blurred background indicates a female indiviual in the back, also viewing multiple monitor screens.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/09_Myth-Busting_Category_1505x922-300x300.jpg)](https://unit42.paloaltonetworks.com/sdlc-supply-chain/ "Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/08/Avital-Insights.png)Yaron Avital](https://unit42.paloaltonetworks.com/author/yaron-avital/) [#### Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain](https://unit42.paloaltonetworks.com/sdlc-supply-chain/ "Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain") * [ChainDrop](https://unit42.paloaltonetworks.com/tag/chaindrop/ "ChainDrop") * [Npm packages](https://unit42.paloaltonetworks.com/tag/npm-packages/ "npm packages") * [Software supply-chain attack](https://unit42.paloaltonetworks.com/tag/software-supply-chain-attack/ "software supply-chain attack") [Read now](https://unit42.paloaltonetworks.com/sdlc-supply-chain/ "Read now") [![Pictorial representation of orange, wave-like lines illuminated against a navy background.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/01/04_Listicle_Overview_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/soc-identity-front-door/ "Inside the Modern SOC: The Identity Front Door") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/06/Maydar-Insights.png)Sharon Maydar](https://unit42.paloaltonetworks.com/author/sharon-maydar/) [#### Inside the Modern SOC: The Identity Front Door](https://unit42.paloaltonetworks.com/soc-identity-front-door/ "Inside the Modern SOC: The Identity Front Door") * [AI](https://unit42.paloaltonetworks.com/tag/ai/ "AI") * [Identity](https://unit42.paloaltonetworks.com/tag/identity/ "identity") * [Social engineering](https://unit42.paloaltonetworks.com/tag/social-engineering/ "social engineering") [Read now](https://unit42.paloaltonetworks.com/soc-identity-front-door/ "Read now") [![Pictorial representation of a group of people interacting with a dynamic 3D holographic display of colorful, undulating data waves on a table.](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/09/11_Myth-Busting_Overview_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/frontier-ai-vulnerability-burst/ "The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/09/Insights_headshot-placeholder.jpg)Xu Zou](https://unit42.paloaltonetworks.com/author/xu-zou/) [#### The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software](https://unit42.paloaltonetworks.com/frontier-ai-vulnerability-burst/ "The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software") * [AI](https://unit42.paloaltonetworks.com/tag/ai/ "AI") * [Frontier AI](https://unit42.paloaltonetworks.com/tag/frontier-ai/ "Frontier AI") * [Vulnerability Exploitation](https://unit42.paloaltonetworks.com/tag/vulnerability-exploitation/ "Vulnerability Exploitation") [Read now](https://unit42.paloaltonetworks.com/frontier-ai-vulnerability-burst/ "Read now") [![Pictorial representation of a female smiling while looking at the screen of a tablet. The backgorund is dark and features warm-toned lights.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/07/03_Opinion_Category_1505x922-1-300x300.jpg)](https://unit42.paloaltonetworks.com/ai-insights-incident-response-report/ "AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/08/Insights-Template-for-More-Portrait-Images-3-300x300.png)Ria Bhatia](https://unit42.paloaltonetworks.com/author/ria-bhatia/) [#### AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report](https://unit42.paloaltonetworks.com/ai-insights-incident-response-report/ "AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report") * [AI](https://unit42.paloaltonetworks.com/tag/ai/ "AI") * [LLM](https://unit42.paloaltonetworks.com/tag/llm/ "LLM") * [Unit 42 Incident Response Report](https://unit42.paloaltonetworks.com/tag/unit-42-incident-response-report/ "Unit 42 Incident Response Report") [Read now](https://unit42.paloaltonetworks.com/ai-insights-incident-response-report/ "Read now") [#### Unit 42 Breaking Insights: Combat Risks from Frontier AI Models](https://start.paloaltonetworks.com/combat-risks-frontier-ai.html "Unit 42 Breaking Insights: Combat Risks from Frontier AI Models") The latest frontier AI models are changing cyber risk faster than traditional defenses can adapt. In this threat briefing, Sam Rubin, SVP of Unit 42, and Palo Alto Networks CISO Marc Benoit will break down how these new models can find and exploit exposures that have gone undetected for years and the implications for security leaders. This session examines how the threat landscape has hit an inflection point, with work that once took deep expertise, time, and manual effort happening in seconds at machine scale. Our experts will discuss what CISOs need to prioritize now to reduce exposure before attackers put these capabilities to broader use. * **Exploit time compression**: How frontier AI models are shrinking the time from vulnerability discovery to exploitation from months to minutes. * **The biggest risks today**: The most immediate risks created by sophisticated, automated attacks at scale. * **Immediate actions to take**: Practical guidance from Palo Alto Networks' own CISO on what leaders should do now. [Watch on demand](https://start.paloaltonetworks.com/combat-risks-frontier-ai.html "Watch on demand") ![](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/04/u42-blog-Combat-Risks.jpg) ### Frontline insights defining the next era of cyber risk. [View All ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://www.paloaltonetworks.com/category/trend-reports?ts=markdown "View All") Report [#### Explore the findings.](https://start.paloaltonetworks.com/unit-42-incident-response-report.html "Explore the findings.") The 2026 Unit 42 Global Incident Response Report confirms it: The adversary isn't just smarter; they are faster. Your new threat reality? AI enables threat actors to move from initial access to exfiltration in minutes, effortlessly bypassing traditional defenses. In the report, you will learn how: * Speed now defines risk: Attacks are 4X faster, with data exfiltration in \<1 hour in some cases. * Identity accelerates impact: 65% of initial access is driven by identity-based techniques allowing unauthorized access, privilege escalation and lateral movement. * Sprawl expands exposure: 87% of attacks unfolded across multiple attack surfaces, making it harder to correlate attack signals. [Get the report](https://start.paloaltonetworks.com/unit-42-incident-response-report.html "Get the report") ![Laptop screen showing Global Incident Response Report by Unit 42.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/02/Palo-Alto-Ads-Web-Resource-Thumbnail-398x304-1.png) [![Pictorial representation of social engineering. Digital illustration of four human profiles connected by glowing neural network lines against a dark background, symbolizing connectivity and technology.](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/07/cover-1920x900-no-blades-300x300.jpg)](https://unit42.paloaltonetworks.com/2025-unit-42-global-incident-response-report-social-engineering-edition/ "2025 Unit 42 Global Incident Response Report: Social Engineering Edition") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg)Cybercrime](https://unit42.paloaltonetworks.com/category/cybercrime/) July 30, 2025 [#### 2025 Unit 42 Global Incident Response Report: Social Engineering Edition](https://unit42.paloaltonetworks.com/2025-unit-42-global-incident-response-report-social-engineering-edition/ "2025 Unit 42 Global Incident Response Report: Social Engineering Edition") * [Agent Serpens](https://unit42.paloaltonetworks.com/tag/agent-serpens/ "Agent Serpens") * [Agentic AI](https://unit42.paloaltonetworks.com/tag/agentic-ai/ "Agentic AI") * [ClickFix](https://unit42.paloaltonetworks.com/tag/clickfix/ "ClickFix") [Read now](https://unit42.paloaltonetworks.com/2025-unit-42-global-incident-response-report-social-engineering-edition/ "Read now") [![Pictorial representation of the ransomware landscape. Digital artwork of a disintegrating U.S. dollar bill with pixelated effects on a cyber-inspired background.](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/04/05_Ransomware_Category_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/2025-ransomware-extortion-trends/ "Extortion and Ransomware Trends January-March 2025") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg)Ransomware](https://unit42.paloaltonetworks.com/category/ransomware/) April 23, 2025 [#### Extortion and Ransomware Trends January-March 2025](https://unit42.paloaltonetworks.com/2025-ransomware-extortion-trends/ "Extortion and Ransomware Trends January-March 2025") * [BianLian](https://unit42.paloaltonetworks.com/tag/bianlian/ "BianLian") * [Akira ransomware](https://unit42.paloaltonetworks.com/tag/akira-ransomware/ "Akira ransomware") * [Muddled Libra](https://unit42.paloaltonetworks.com/tag/muddled-libra/ "Muddled Libra") [Read now](https://unit42.paloaltonetworks.com/2025-ransomware-extortion-trends/ "Read now") [![Pictorial representation of securing GenAI. A glowing cube labeled "AI" centrally positioned on a circuit board with intricate electronic connections and blue lighting.](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/04/03_Security-Technology_Category_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/new-frontier-of-genai-threats-a-comprehensive-guide-to-prompt-attacks/ "How Prompt Attacks Exploit GenAI and How to Fight Back") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-vulnerability-1.svg)Vulnerabilities](https://unit42.paloaltonetworks.com/category/vulnerabilities/) April 9, 2025 [#### How Prompt Attacks Exploit GenAI and How to Fight Back](https://unit42.paloaltonetworks.com/new-frontier-of-genai-threats-a-comprehensive-guide-to-prompt-attacks/ "How Prompt Attacks Exploit GenAI and How to Fight Back") * [LLM](https://unit42.paloaltonetworks.com/tag/llm/ "LLM") * [GenAI](https://unit42.paloaltonetworks.com/tag/genai/ "GenAI") * [Prompt injection](https://unit42.paloaltonetworks.com/tag/prompt-injection/ "prompt injection") [Read now](https://unit42.paloaltonetworks.com/new-frontier-of-genai-threats-a-comprehensive-guide-to-prompt-attacks/ "Read now") [![A pictorial representation of AI threats. Looking over the shoulder of a man in the cockpit of a vessel in space, the window looks out on an Earth-like planet.](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/10/AI-Threat-Report-Header-Image-Revision-300x300.jpg)](https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/ "Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-podcast-player.svg)Learning Hub](https://unit42.paloaltonetworks.com/category/learning-hub/) October 16, 2024 [#### Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks](https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/ "Unit 42 Looks Toward the Threat Frontier: Preparing for Emerging AI Risks") * [GenAI](https://unit42.paloaltonetworks.com/tag/genai/ "GenAI") [Read now](https://unit42.paloaltonetworks.com/prepare-for-emerging-ai-risks-unit-42-threat-frontier/ "Read now") ### Follow the activities of threat actor groups tracked by Unit 42 [All threat actor posts ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg)](https://www.paloaltonetworks.com/category/threat-actor-groups?ts=markdown "All threat actor posts") ![Pictorial representation of Screening Serpens. An illustrated blue snake is highlighted by a red circle against a night sky. The constellation serpens.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/05/Serpens-Iran-A-1920x900-2.png) [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) May 22, 2026 [#### Tracking Iranian APT Screening Serpens' 2026 Espionage Campaigns](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/ "Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns") [Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campaigns.](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/) [Read now](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/ "Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns") [![Pictorial representation of Screening Serpens. An illustrated blue snake is highlighted by a red circle against a night sky. The constellation serpens.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/05/Serpens-Iran-A-1920x900-2-300x300.png)](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/ "Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) May 22, 2026 [#### Tracking Iranian APT Screening Serpens' 2026 Espionage Campaigns](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/ "Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns") * [Advanced Persistent Threat](https://unit42.paloaltonetworks.com/tag/advanced-persistent-threat/ "Advanced Persistent Threat") * [AppDomainManager](https://unit42.paloaltonetworks.com/tag/appdomainmanager/ "AppDomainManager") * [DLL Sideloading](https://unit42.paloaltonetworks.com/tag/dll-sideloading/ "DLL Sideloading") [Read now](https://unit42.paloaltonetworks.com/tracking-iran-apt-screening-serpens/ "Read now") [![Pictorial representation of cyberespionage campaigns. Digital world map with abstract lines and circles in various colors overlaying it, suggesting data flow and connections. The map appears in shades of blue against a darker background.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/03/08_Nation-State-cyberattacks_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/espionage-campaigns-target-se-asian-government-org/ "Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/malware.svg)Malware](https://unit42.paloaltonetworks.com/category/malware/) March 26, 2026 [#### Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government](https://unit42.paloaltonetworks.com/espionage-campaigns-target-se-asian-government-org/ "Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government") * [CL-STA-1048](https://unit42.paloaltonetworks.com/tag/cl-sta-1048/ "CL-STA-1048") * [CL-STA-1049](https://unit42.paloaltonetworks.com/tag/cl-sta-1049/ "CL-STA-1049") * [Stately Taurus](https://unit42.paloaltonetworks.com/tag/stately-taurus/ "Stately Taurus") [Read now](https://unit42.paloaltonetworks.com/espionage-campaigns-target-se-asian-government-org/ "Read now") [![Pictorial representation of the APT Boggy Serpens. An illustrated blue snake is highlighted by a red circle against a night sky. The constellation serpens.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/03/Boggy-Serpens-1920x900-1-300x300.png)](https://unit42.paloaltonetworks.com/boggy-serpens-threat-assessment/ "Boggy Serpens Threat Assessment") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg)Cybercrime](https://unit42.paloaltonetworks.com/category/cybercrime/) March 16, 2026 [#### Boggy Serpens Threat Assessment](https://unit42.paloaltonetworks.com/boggy-serpens-threat-assessment/ "Boggy Serpens Threat Assessment") * [Advanced Persistent Threat](https://unit42.paloaltonetworks.com/tag/advanced-persistent-threat/ "Advanced Persistent Threat") * [Boggy Serpens](https://unit42.paloaltonetworks.com/tag/boggy-serpens/ "Boggy Serpens") * [C2](https://unit42.paloaltonetworks.com/tag/c2/ "C2") [Read now](https://unit42.paloaltonetworks.com/boggy-serpens-threat-assessment/ "Read now") [![Pictorial representation of Muddled Libra, aka Scattered Spider. A vibrant illustration of the Libra zodiac sign, featuring a stylized balance scale overlaid with a prominent Libra symbol. The background is a starry night sky with shades of purple and blue, suggesting a cosmic theme.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/02/03-1-Muddle-Libra-1920x900-1-300x300.png)](https://unit42.paloaltonetworks.com/muddled-libra-ops-playbook/ "A Peek Into Muddled Libra’s Operational Playbook") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/cybercrime.svg)Cybercrime](https://unit42.paloaltonetworks.com/category/cybercrime/) February 10, 2026 [#### A Peek Into Muddled Libra's Operational Playbook](https://unit42.paloaltonetworks.com/muddled-libra-ops-playbook/ "A Peek Into Muddled Libra’s Operational Playbook") * [Muddled Libra](https://unit42.paloaltonetworks.com/tag/muddled-libra/ "Muddled Libra") * [PowerShell](https://unit42.paloaltonetworks.com/tag/powershell/ "PowerShell") * [Scattered Spider](https://unit42.paloaltonetworks.com/tag/scattered-spider/ "Scattered Spider") [Read now](https://unit42.paloaltonetworks.com/muddled-libra-ops-playbook/ "Read now") [![Pictorial representation of the shadow campaigns. Digital graphic showing a networked globe with various data points and connectivity lines, symbolizing global digital communication and information technology.](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/02/03_Nation-State-cyberattacks_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/ "The Shadow Campaigns: Uncovering Global Espionage") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/07/nation-state-cyberattacks.svg)Nation-State Cyberattacks](https://unit42.paloaltonetworks.com/category/nation-state-cyberattacks/) February 5, 2026 [#### The Shadow Campaigns: Uncovering Global Espionage](https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/ "The Shadow Campaigns: Uncovering Global Espionage") * [Espionage](https://unit42.paloaltonetworks.com/tag/espionage/ "Espionage") * [Government](https://unit42.paloaltonetworks.com/tag/government/ "Government") * [Phishing](https://unit42.paloaltonetworks.com/tag/phishing/ "phishing") [Read now](https://unit42.paloaltonetworks.com/shadow-campaigns-uncovering-global-espionage/ "Read now") [![Pictorial representation of RaaS RansomHouse. Digital representation of cybersecurity concept with a padlock superimposed over computer circuit boards, symbolizing data protection and encryption technologies.](https://unit42.paloaltonetworks.com/wp-content/uploads/2025/12/06_Ransomware_Category_1920x900-300x300.jpg)](https://unit42.paloaltonetworks.com/ransomhouse-encryption-upgrade/ "From Linear to Complex: An Upgrade in RansomHouse Encryption") [![category icon](https://unit42.paloaltonetworks.com/wp-content/uploads/2024/06/icon-ransomware.svg)Ransomware](https://unit42.paloaltonetworks.com/category/ransomware/) December 17, 2025 [#### From Linear to Complex: An Upgrade in RansomHouse Encryption](https://unit42.paloaltonetworks.com/ransomhouse-encryption-upgrade/ "From Linear to Complex: An Upgrade in RansomHouse Encryption") * [ESXi](https://unit42.paloaltonetworks.com/tag/esxi/ "ESXi") * [Jolly Scorpius](https://unit42.paloaltonetworks.com/tag/jolly-scorpius/ "Jolly Scorpius") * [RansomHouse](https://unit42.paloaltonetworks.com/tag/ransomhouse/ "RansomHouse") [Read now](https://unit42.paloaltonetworks.com/ransomhouse-encryption-upgrade/ "Read now") ![Palo Alto BG logo](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/social-follow-bg-logo.svg) #### Follow Unit 42 for breaking threat intelligence * [![Twitter](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/X_Icon.svg)](https://twitter.com/Unit42_Intel) * [![LinkedIn](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/LinkedIn_Icon.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Youtube](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-youtube.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Facebook](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/Facebook_Icon.svg)](https://www.facebook.com/PaloAltoNetworks/) ![Newsletter](https://unit42.paloaltonetworks.com/wp-content/uploads/2026/03/unit42-footer-subscribe-desktop.png) ![UNIT 42 Small Logo](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/palo-alto-logo-small.svg) Get updates from Unit 42 ## Peace of mind comes from staying ahead of threats. Subscribe today. Your Email Subscribe for email updates to all Unit 42 threat research. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use "Terms of Use") and acknowledge our [Privacy Statement.](https://www.paloaltonetworks.com/legal-notices/privacy "Privacy Statement") This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Invalid captcha! Subscribe ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg) ![loader](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-loader.svg) {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase) * [Prisma SASE](https://www.paloaltonetworks.com/sase) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention) * [Prisma Access](https://www.paloaltonetworks.com/sase/access) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners) Company * [About Us](https://www.paloaltonetworks.com/about-us) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility) * [Customers](https://www.paloaltonetworks.com/customers) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/) * [Communities](https://www.paloaltonetworks.com/communities) * [Content Library](https://www.paloaltonetworks.com/resources) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure) * [Sitemap](https://www.paloaltonetworks.com/sitemap) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use) * [Documents](https://www.paloaltonetworks.com/legal) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language ![Play](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-play-icon.svg) ![Pause](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-pause-icon1.svg) ![Minimize](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-minimize.svg) ![Close button](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/close-modal.svg) ### Default Heading Read the article ![Right Arrow](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/right-arrow.svg) Seekbar ![Play](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-play-icon.svg) ![Pause](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/player-pause-icon1.svg) ![Volume](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-volume.svg) Volume ![Minimize](https://unit42.paloaltonetworks.com/wp-content/themes/unit42-v6/dist/images/icons/icon-minimize.svg)