Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederunit42.paloaltonetworks.com
Unit42
Get the latest updates from Unit42 directly as they happen.
Follow now 143 followers
Latest posts
Last updated 2 days ago
Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite
2 days ago
Hamas-affiliated threat actor Ashen Lepus (aka WIRTE) is conducting espionage with its...
01flip: Multi-Platform Ransomware Written in Rust
3 days ago
01flip is a new ransomware family fully written in Rust. Activity linked...
New Prompt Injection Attack Vectors Through MCP Sampling
7 days ago
Model Context Protocol connects LLM apps to external data sources or tools...
Critical Vulnerabilities in React Server Components and Next.js
8 days ago
We discuss the CVSS 10.0-rated RCE vulnerabilities in the Flight protocol used...
The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen
10 days ago
85% of daily work occurs in the browser. Unit 42 outlines key...
The Golden Scale: 'Tis the Season for Unwanted Gifts
17 days ago
Unit 42 shares further updates of cybercrime group Scattered LAPSUS$ Hunters. Secure...
The Dual-Use Dilemma of AI: Malicious LLMs
18 days ago
The line between research tool and threat creation engine is thin. We...
Anatomy of an Akira Ransomware Attack: When a Fake CAPTCHA Led to 42 Days of Compromise
24 days ago
Unit 42 outlines a Howling Scorpius attack delivering Akira ransomware that originated...
Digital Doppelgangers: Anatomy of Evolving Impersonation Campaigns Distributing Gh0st RAT
28 days ago
Two campaigns delivering Gh0st RAT to Chinese speakers show a deep understanding...
You Thought It Was Over? Authentication Coercion Keeps Evolving
about 1 month ago
A new type of authentication coercion attack exploits an obscure and rarely...
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices
about 1 month ago
Commercial-grade LANDFALL spyware exploits CVE-2025-21042 in Samsung Android’s image processing library. The...
Know Ourselves Before Knowing Our Enemies: Threat Intelligence at the Expense of Asset Management
about 1 month ago
Effective cyber defense starts with knowing your own network. Unit 42 explains...