Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of large-scale credential attacks. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.
 category iconHigh Profile Threats August 18, 2026

Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks.

  • Credential theft
Read now
Pictorial representation of Kimwolf botnet malware family. Digital screen with a warning sign reading "Malware." The background features lines of computer code and graphics, creating a sense of cybersecurity threat.
 category iconThreat Research August 11, 2026

Kimwolf v7: An Evolution of the Kimwolf Botnet

  • Android APK
  • Ethereum
  • HTTP
Read now
Pictorial representatiom pf Aeternum's blockchain C2. A close-up of a computer circuit board with a central microchip is depicted. Red digital data streams in the form of glowing binary numbers and arrows appear to flow in and out of the chip. The scene is illuminated with a futuristic blue and red glow.
 category iconThreat Research August 10, 2026

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

  • Aeternum
  • Infection chain
  • JSON
Read now
Pictorial representation of orange, wave-like lines illuminated against a navy background.
 category iconInsights August 7, 2026

Inside the Modern SOC: The Identity Front Door

  • AI
  • Identity
  • Social engineering
Read now
Pictorial representation of ChainDrop, a self-propagating npm worm. An artistic depiction of a digital workspace featuring an open laptop with a red virus on the screen.
 category iconHigh Profile Threats August 6, 2026

ChainDrop: Inside a Self-Propagating npm Worm

  • Blockchain
  • ChainDrop
  • Claude code
Read now
Pictorial representation of Token-jacking. A person types on a laptop with multiple digital interface elements projected, including an "AI" icon
 category iconThreat Research August 6, 2026

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

  • AI API
  • AI gateway
  • API keys
Read now
Pictorial representation of a group of people interacting with a dynamic 3D holographic display of colorful, undulating data waves on a table.
 category iconInsights August 4, 2026

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

  • AI
  • Frontier AI
  • Vulnerability Exploitation
Read now
Pictorial representation of malware bypassing DNS and communicating directly to IP addresses. Futuristic digital cityscape with glowing blue and orange geometric structures, resembling skyscrapers.
 category iconThreat Research August 4, 2026

Almost Half of Malware Samples Communicate Direct to IP

  • Command and Control
  • D2IP
  • Exfiltration
Read now
Pictorial representation of passwordless authentication. East Asian woman examining data on multiple screens in a high-tech environment, surrounded by digital graphics and code.
 category iconThreat Research August 3, 2026

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

  • Google authenticator
  • Google Chrome
  • Google Cloud
Read now
Pictorial representation of XCSSET v40. A blurred image focusing on a person typing on a laptop with lines of code visible on the screen, illuminated in blue and red lights, suggestive of intense coding or cyber activities.
 category iconThreat Research July 31, 2026

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

  • Browser hijacking
  • Credential theft
  • Data exfiltration
Read now
Pictorial representation of AI-enabled autonomous cyberattacks. A digital illustration depicting abstract, interconnected data streams in vibrant colors on a dark blue background
 category iconThreat Research July 30, 2026

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

  • ChatGPT
  • Claude code
  • CVEs
Read now
Pictorial representation of Russian global webmail espionage campaign. A digital illustration of a world map in a network style, highlighting continents with glowing lines and connectivity points in a red and blue theme.
 category iconThreat Research July 23, 2026

Russian Global Webmail Espionage

  • CL-STA-1114
  • JavaScript
  • Javascript injection
Read now
Pictorial representation of three zero-day vulnerabilities in Siemens ROX II OT switches. Digital illustration of a global network featuring interconnected lines and nodes over a map of the world, highlighted with neon lights and digital elements.
 category iconThreat Research July 17, 2026

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

  • Command injection
  • CVE-2025-40947
  • CVE-2025-40948
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Proactive Assessments
  • Incident Response
  • Transform Your Security Strategy
  • Discover Threat Intelligence
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow