Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of PAN-OS CVE-2026-0257. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.
 category iconHigh Profile Threats October 19, 2026

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)

Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257.

  • CVE-2026-0257
  • Vulnerability
Read now
Pictorial representation of WebAuthn. A person wearing glasses with computer code reflected in the lenses. The focus is on the eye, and the code is clear and detailed.
 category iconInsights October 16, 2026

Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026

  • Initial Access
  • Threat intelligence
  • Trends
Read now
Pictorial representation of AI-powered campaign targeting government infrastructure. A glowing, blue, brain-shaped structure floats above a central microchip on a circuit board. The scene is futuristic, with neon lights illuminating the interconnected pathways and components.
 category iconThreat Research October 15, 2026

AI-Powered Espionage Campaign Targets Government Linux Infrastructure

  • Exfiltration
  • LLM
  • Network security
Read now
Pictorial representation of PEERSTITCH, a FortiGate implant. A digital illustration depicting a circuit board with a prominent red warning triangle and exclamation mark in the center. The background is filled with various computer circuitry patterns.
 category iconThreat Research October 14, 2026

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

  • Apache
  • CL-STA-0954
  • Logging
Read now
Pictorial representation of a bokeh style graphic showing purple and orange spheres with interconnected white network lines.
 category iconInsights October 13, 2026

The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk

  • Credential-based attacks
  • Incident response
  • Reconnaissance
Read now
Pictorial representation of a laptop with various charts and graphs illuminated on the screen.
 category iconInsights October 7, 2026

Evolution of Web3 in Cloud Supply Chain Attacks

  • Cloud configuration
  • DPRK
  • Supply-chain attack
Read now
Pictorial representation of operation blinder tunnel. Screen displaying code with a prominent alert symbol and the words 'VIRUS DETECTED' highlighted in red.
 category iconThreat Research October 6, 2026

Blinder Tunnel Campaign Targets Iraqi Infrastructure

  • Advanced Persistent Threat
  • Agent Serpens
  • AppDomainManager
Read now
Pictorial representation of NetScaler zero days. Digital illustration of a map of North America with interconnected glowing lines and dots symbolizing network connections across the continent.
 category iconHigh Profile Threats September 30, 2026

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

  • Citrix
  • CVE-2026-88771
  • CVE-2026-88772
Read now
Pictorial representation of how K8 operators betray your security posture. A close-up of a futuristic microchip with glowing circuits in vibrant colors, including blue, purple, and orange, reflecting light.
 category iconThreat Research September 29, 2026

OperTraitors: How Kubernetes Operators Betray Your Security Posture

  • AI
  • AI agents
  • API
Read now
Pictorial representation of logit-gap steering and LLMs. Abstract digital artwork featuring a cityscape silhouette with glowing blue and orange lights, set against a bokeh background.
 category iconInsights September 25, 2026

3 Consulting Myths Debunked by Unit 42 Experts

  • AI
  • Privilege escalation
  • Unit 42 Incident Response Report
Read now
Pictorial representation of how AWS neutralizes compromised IAM credentials. Digital illustration of a glowing cloud composed of binary code, surrounded by dynamic red and blue light streaks, symbolizing cloud computing technology.
 category iconThreat Research September 21, 2026

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

  • AWS
  • AWS CloudTrail
  • Bedrock
Read now
Pictorial representation of how default AWS AgentCore Harness configurations allow prompt injection to exfiltrate AgentCore Identity credentials. Futuristic illustration with glowing neon lights and advanced technology motifs, depicting cloud computing and data flow through interconnected networks. The scene is highlighted by hovering digital clouds and dynamic, illuminated linear structures, set in a dramatic, blue and orange color scheme.
 category iconThreat Research September 18, 2026

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

  • Agentic AI
  • AWS
  • Cloud
Read now
Pictorial representation of a woman in glasses gazing to the side overlaid with glowing digital code and data streams.
 category iconInsights September 17, 2026

Inside the Modern SOC: Defending the Cross-Environment Pivot

  • AI
  • Attack surface
  • Unit 42 Incident Response Report
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Observability
  • Cortex XCOR
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Prepare for Emerging Risks
  • Strengthen Your Defenses
  • Build Your Security Strategy
  • Understand the Adversary
  • Respond to a Cyber Attack
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow