{"id":157807,"date":"2025-09-29T03:00:12","date_gmt":"2025-09-29T10:00:12","guid":{"rendered":"https:\/\/unit42.paloaltonetworks.com\/?post_type=threat-bulletin&p=157807"},"modified":"2026-03-16T04:14:05","modified_gmt":"2026-03-16T11:14:05","slug":"september-2025","status":"publish","type":"threat-bulletin","link":"https:\/\/unit42.paloaltonetworks.com\/ja\/threat-bulletin\/september-2025\/","title":{"rendered":"Unit 42 Threat Bulletin \u2013 September 2025"},"content":{"rendered":"

September is here, bringing a packed edition of the Unit 42 Threat Bulletin in a fresh new format. As the cyber threat landscape continues to evolve, we will share new content and expert perspectives with every issue. I\u2019m Mitch Mayne, Editor in Chief of the Threat Bulletin and Cybersecurity Research Principal for Unit 42.\u00a0<\/span><\/p>\n

This month, we spotlight the surge in payroll account takeover attacks and reveal how attackers are seizing employee paychecks as a potential gateway to broader network compromise. You'll also find a candid video where I meet with Wendi Whitmore, Chief Security Intelligence Officer, to discuss why AI instances may be becoming the newest insider threat. Finally, we examine an aggressive SEO poisoning campaign targeting trusted government and enterprise organizations\u2013showcasing how attackers are hijacking user search traffic to spread scams and malware.<\/span><\/p>\n

Let\u2019s get into it.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.<\/p>\n","protected":false},"author":359,"featured_media":157841,"template":"","categories":[9428],"tags":[],"coauthors":[9538],"class_list":["post-157807","threat-bulletin","type-threat-bulletin","status-publish","has-post-thumbnail","hentry","category-insights"],"yoast_head":"\nUnit 42 Threat Bulletin \u2013 September 2025 - Unit 42<\/title>\n<meta name=\"description\" content=\"September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Unit 42 Threat Bulletin \u2013 September 2025\" \/>\n<meta property=\"og:description\" content=\"September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/\" \/>\n<meta property=\"og:site_name\" content=\"Unit 42\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-16T11:14:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2025\/09\/01_General_Overview_1920x900.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Unit 42 Threat Bulletin \u2013 September 2025 - Unit 42","description":"September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/","og_locale":"ja_JP","og_type":"article","og_title":"Unit 42 Threat Bulletin \u2013 September 2025","og_description":"September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.","og_url":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/","og_site_name":"Unit 42","article_modified_time":"2026-03-16T11:14:05+00:00","og_image":[{"width":1920,"height":900,"url":"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2025\/09\/01_General_Overview_1920x900.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/","url":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/","name":"Unit 42 Threat Bulletin \u2013 September 2025 - Unit 42","isPartOf":{"@id":"https:\/\/unit42.paloaltonetworks.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/#primaryimage"},"image":{"@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/#primaryimage"},"thumbnailUrl":"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2025\/09\/01_General_Overview_1920x900.jpg","datePublished":"2025-09-29T10:00:12+00:00","dateModified":"2026-03-16T11:14:05+00:00","description":"September is here, bringing a packed edition of the Unit 42 Threat Bulletin. Expect new content and expert perspectives in each issue.","breadcrumb":{"@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/#breadcrumb"},"inLanguage":"ja","potentialAction":[{"@type":"ReadAction","target":["https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/"]}]},{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/#primaryimage","url":"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2025\/09\/01_General_Overview_1920x900.jpg","contentUrl":"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2025\/09\/01_General_Overview_1920x900.jpg","width":1920,"height":900,"caption":"Dynamic digital waves in orange and blue."},{"@type":"BreadcrumbList","@id":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/september-2025\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/unit42.paloaltonetworks.com\/ja\/"},{"@type":"ListItem","position":2,"name":"Threat Bulletins","item":"https:\/\/unit42.paloaltonetworks.com\/threat-bulletin\/"},{"@type":"ListItem","position":3,"name":"Unit 42 Threat Bulletin \u2013 September 2025"}]},{"@type":"WebSite","@id":"https:\/\/unit42.paloaltonetworks.com\/#website","url":"https:\/\/unit42.paloaltonetworks.com\/","name":"Unit 42","description":"Palo Alto Networks","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/unit42.paloaltonetworks.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ja"}]}},"_links":{"self":[{"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/threat-bulletin\/157807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/threat-bulletin"}],"about":[{"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/types\/threat-bulletin"}],"author":[{"embeddable":true,"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/users\/359"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/media\/157841"}],"wp:attachment":[{"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/media?parent=157807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/categories?post=157807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/tags?post=157807"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/coauthors?post=157807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}