Researchers at Palo Alto Networks Unit 42 discovered a vulnerability in Google Cloud Vertex AI SDK for Python that allowed attackers to hijack model uploads and achieve remote code execution across te…
A security researcher demonstrated that the `aiplatform.customJobs.create` permission in Google Cloud's Vertex AI allows privilege escalation to full project control, contradicting Google's documentat…
Unit 42's 2026 Global Incident Response Report reveals attackers can move from initial access to data exfiltration in as little as 72 minutes, a 4X year-over-year acceleration. The speed gap forces SO…
Researchers introduced Behavioral Integrity Verification (BIV), an audit tool that compares AI agent skills' declared behavior against actual actions across metadata, code, and instructions. Testing o…
Threat actors are increasingly using Microsoft Teams to launch phishing attacks, with collaboration tool phishing alerts rising to 42% of all phishing alerts in early 2026. Groups like Cloaked Ursa an…
Palo Alto Networks Unit 42 researchers uncovered Operation FlutterBridge, a macOS malvertising campaign distributing a new backdoor called FlutterShell via Google Ads. The financially-motivated attack…
Unit 42 reports a significant decline in ransomware encryption use, dropping to 78% in 2025 as threat actors shift to data theft and extortion without encryption. Driven by advanced backups, endpoint …