Palo Alto Networks released OperTraitor, an open-source LLM-powered analysis engine that ingests raw RBAC configurations from locally installed Kubernetes operators and the OperatorHub catalog to calc…
Palo Alto Networks Unit 42 researchers found that default configurations in AWS AgentCore Harness let prompt injection steer an agent into exfiltrating plaintext credentials managed by AgentCore Ident…
Palo Alto Networks' Unit 42 built a behavioral clustering model that mapped over 40,000 cloud identities across 125 cloud environments over a two-month period into functional roles including administr…
Palo Alto Networks' Unit 42 identified two ongoing cyber campaigns targeting Latin American organizations, including a Mexican transportation campaign (CL-CRI-1131) and a Brazilian financial campaign …
Unit 42, Palo Alto Networks' threat intelligence team, reported a ransomware attack in which a human attacker used frontier AI agents to breach an enterprise network autonomously, compressing over 50 …
Palo Alto Networks' Unit 42 research introduces perturbation probing, a diagnostic that identifies the minimal set of neurons responsible for LLM safety refusal behavior, finding that just 50 out of 3…
Palo Alto Networks Unit 42 analyzed 405 AI-enabled malware samples and found that only 12 (3.0%) appeared in production telemetry on Cortex XDR-protected endpoints, with approximately 97% existing onl…
Palo Alto Networks' Unit 42 has responded to a growing number of AI token jacking cases, where cybercriminals steal API keys to access AI platforms, leading to staggering financial losses. The theft e…
Palo Alto Networks' vulnerability research team reported that its autonomous system, the Network and Open-Source Vulnerability Analyzer (NOVA), analyzed 3,915 open-source software projects in two mont…
Unit 42 identified a Chinese-speaking threat actor using the Hermes Agent framework with DeepSeek as an autonomous offensive operator to target infrastructure via seven vulnerabilities, combining AI-d…
Unit 42's 2026 Global Incident Response Report finds that AI is acting as a force multiplier for attackers, compressing attack lifecycles from days to hours, but the fundamental threat landscape remai…
Palo Alto Networks Unit 42 identified a previously undocumented modular IoT botnet framework named TuxBot v3 Evolution, whose authors used an LLM to assist in code development but left a safety discla…
Unit 42 researchers discovered that large language models consistently hallucinate web domains for legitimate brands, a phenomenon called phantom squatting. Adversaries are registering these nonexiste…
Palo Alto Networks' Unit 42 research has observed the first in-the-wild cases of web-based indirect prompt injection (IDPI) attacks, where adversaries embed hidden instructions in web content to manip…
Palo Alto Networks Unit 42 researchers discovered five malicious skills on OpenClaw's ClawHub marketplace between February and May 2026, including infostealers, evasion techniques, and novel agentic t…
Researchers at Palo Alto Networks Unit 42 discovered a vulnerability in Google Cloud Vertex AI SDK for Python that allowed attackers to hijack model uploads and achieve remote code execution across te…
Unit 42's 2026 Global Incident Response Report reveals attackers can move from initial access to data exfiltration in as little as 72 minutes, a 4X year-over-year acceleration. The speed gap forces SO…
Researchers introduced Behavioral Integrity Verification (BIV), an audit tool that compares AI agent skills' declared behavior against actual actions across metadata, code, and instructions. Testing o…
Threat actors are increasingly using Microsoft Teams to launch phishing attacks, with collaboration tool phishing alerts rising to 42% of all phishing alerts in early 2026. Groups like Cloaked Ursa an…
Palo Alto Networks Unit 42 researchers uncovered Operation FlutterBridge, a macOS malvertising campaign distributing a new backdoor called FlutterShell via Google Ads. The financially-motivated attack…