Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of how K8 operators betray your security posture. A close-up of a futuristic microchip with glowing circuits in vibrant colors, including blue, purple, and orange, reflecting light.
 category iconThreat Research September 29, 2026

OperTraitors: How Kubernetes Operators Betray Your Security Posture

We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.

  • AI
  • AI agents
  • API
Read now
Pictorial representation of NetScaler zero days. Digital illustration of a map of North America with interconnected glowing lines and dots symbolizing network connections across the continent.
 category iconHigh Profile Threats September 28, 2026

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

  • Citrix Netscaler
  • Denial of service
  • Remote Code Execution
Read now
Pictorial representation of logit-gap steering and LLMs. Abstract digital artwork featuring a cityscape silhouette with glowing blue and orange lights, set against a bokeh background.
 category iconInsights September 25, 2026

3 Consulting Myths Debunked by Unit 42 Experts

  • AI
  • Privilege escalation
  • Unit 42 Incident Response Report
Read now
Pictorial representation of how AWS neutralizes compromised IAM credentials. Digital illustration of a glowing cloud composed of binary code, surrounded by dynamic red and blue light streaks, symbolizing cloud computing technology.
 category iconThreat Research September 21, 2026

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

  • AWS
  • AWS CloudTrail
  • Bedrock
Read now
Pictorial representation of how default AWS AgentCore Harness configurations allow prompt injection to exfiltrate AgentCore Identity credentials. Futuristic illustration with glowing neon lights and advanced technology motifs, depicting cloud computing and data flow through interconnected networks. The scene is highlighted by hovering digital clouds and dynamic, illuminated linear structures, set in a dramatic, blue and orange color scheme.
 category iconThreat Research September 18, 2026

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

  • Agentic AI
  • AWS
  • Cloud
Read now
Pictorial representation of a woman in glasses gazing to the side overlaid with glowing digital code and data streams.
 category iconInsights September 17, 2026

Inside the Modern SOC: Defending the Cross-Environment Pivot

  • AI
  • Attack surface
  • Unit 42 Incident Response Report
Read now
Pictorial representation of a magnifying glass illuminating a glowing orange circular digital circuit interface on a dark, high-tech background.
 category iconInsights September 16, 2026

Atomic macOS (AMOS) Stealer Activity

  • MacOS
  • Threat intelligence
  • Unit 42
Read now
Pictorial representation of automated detection. Digital illustration of a glowing blue brain connected to a network of lines and lights.
 category iconThreat Research September 14, 2026

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection

  • AWS CloudTrail
  • Cloud detection
  • DevOps
Read now
Pictorial representation of post-exploitation identity misuse in SPIFFE/SPIRE. Close-up of a person wearing glasses, with computer code reflected in the lenses.
 category iconThreat Research September 10, 2026

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

  • API
  • Cryptographic
  • JSON
Read now
Pictorial representation of a pay-per-install threat group campaign prodiving infection service for spreading malware. A close-up of a computer circuit board with a central microchip is depicted. Red digital data streams in the form of glowing binary numbers and arrows appear to flow in and out of the chip, symbolizing data processing and transfer. The scene is illuminated with a futuristic blue and red glow.
 category iconThreat Research September 9, 2026

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

  • ARKTunnel
  • C2
  • CL-CRI-1171
Read now
Pictorial representation of attackers using AI tools to target Latin American organizations. A vibrant cityscape with silhouettes of numerous people walking along a bustling street. The scene is illuminated by bright urban lights and digital-like particles, creating a dynamic and futuristic atmosphere.
 category iconThreat Research September 3, 2026

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

  • Agentic AI
  • ChatGPT
  • CL-CRI-1131
Read now
Pictorial representation of a woman in glasses viewing a reflection of a monitor screen. The reflection features multicolored numbers, arrows, and graphs.
 category iconInsights September 2, 2026

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

  • Agentic AI
  • Frontier AI
Read now
Pictorial representation of vishing campaigns in Microsoft Teams. A digital image of a skull formed by blue binary code on a black background, with scattered ones and zeros and digital noise, symbolizes how stealthy prompt injection attacks can exploit AI logic to bypass security controls.
 category iconThreat Research August 31, 2026

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

  • Cloaked Ursa
  • Entra ID
  • Microsoft Teams
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Prepare for Emerging Risks
  • Strengthen Your Defenses
  • Build Your Security Strategy
  • Understand the Adversary
  • Respond to a Cyber Attack
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow