Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of a group of people interacting with a dynamic 3D holographic display of colorful, undulating data waves on a table.
 category iconInsights August 4, 2026

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-source software supply chain.

  • AI
  • Frontier AI
  • Vulnerability Exploitation
Read now
Pictorial representation of malware bypassing DNS and communicating directly to IP addresses. Futuristic digital cityscape with glowing blue and orange geometric structures, resembling skyscrapers.
 category iconThreat Research August 4, 2026

Almost Half of Malware Samples Communicate Direct to IP

  • Command and Control
  • D2IP
  • Exfiltration
Read now
Pictorial representation of passwordless authentication. East Asian woman examining data on multiple screens in a high-tech environment, surrounded by digital graphics and code.
 category iconThreat Research August 3, 2026

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

  • Google authenticator
  • Google Chrome
  • Google Cloud
Read now
Pictorial representation of XCSSET v40. A blurred image focusing on a person typing on a laptop with lines of code visible on the screen, illuminated in blue and red lights, suggestive of intense coding or cyber activities.
 category iconThreat Research July 31, 2026

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

  • Browser hijacking
  • Credential theft
  • Data exfiltration
Read now
Pictorial representation of AI-enabled autonomous cyberattacks. A digital illustration depicting abstract, interconnected data streams in vibrant colors on a dark blue background
 category iconThreat Research July 30, 2026

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

  • ChatGPT
  • Claude code
  • CVEs
Read now
Pictorial representation of Russian global webmail espionage campaign. A digital illustration of a world map in a network style, highlighting continents with glowing lines and connectivity points in a red and blue theme.
 category iconThreat Research July 23, 2026

Russian Global Webmail Espionage

  • CL-STA-1114
  • JavaScript
  • Javascript injection
Read now
Pictorial representation of three zero-day vulnerabilities in Siemens ROX II OT switches. Digital illustration of a global network featuring interconnected lines and nodes over a map of the world, highlighted with neon lights and digital elements.
 category iconThreat Research July 17, 2026

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

  • Command injection
  • CVE-2025-40947
  • CVE-2025-40948
Read now
Pictorial representation of a female smiling while looking at the screen of a tablet. The backgorund is dark and features warm-toned lights.
 category iconInsights July 16, 2026

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

  • AI
  • LLM
  • Unit 42 Incident Response Report
Read now
Pictorial representation of the npm packages supply chain attack. Screen displaying code with a prominent alert symbol and the words 'VIRUS DETECTED' highlighted in red.
 category iconHigh Profile Threats July 15, 2026

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

  • Credential Harvesting
  • GitHub
  • Npm packages
Read now
 category iconThreat Research July 15, 2026

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

  • C2
  • DGA
  • Docker compose
Read now
A board room against a backdrop of windows showing a cityscape.
 category iconInsights July 10, 2026

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

  • Howling Scorpius
  • RaaS
  • Spikey Scorpius
Read now
Pictorial representation of Vidar Stealer. A digital image of a skull formed by blue binary code on a black background, with scattered ones and zeros and digital noise.
 category iconThreat Research July 7, 2026

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

  • AMSI
  • Cryptocurrency
  • DLL Sideloading
Read now
Pictorial representation of WebAuthn. A person wearing glasses with computer code reflected in the lenses. The focus is on the eye, and the code is clear and detailed.
 category iconInsights July 2, 2026

How We Added WebAuthn to a Browser-Based RDP Client

  • IDA Pro
  • Microsoft
  • RDP
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Proactive Assessments
  • Incident Response
  • Transform Your Security Strategy
  • Discover Threat Intelligence
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow