Search: “Unit 42”

112 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 454 Ransomware 262 Vulnerability 254 Exploit / PoC 132 Threat actor 127 Phishing & fraud 89 Data breach 70 Policy & legal 62 Industry 50 Research 31 AI safety & security 20 Tools 7 Advisory 4 AI industry 2

SeverityAll critical 510 high 474 medium 382 low 137 info 65

Unit 42 Cloud Threat Report Update: Cloud Security Weakens as More Organizations Fail to Secure IAM

Palo Alto Unit 42Jun 6, 12:17 UTC · Jun 6, 2024Vulnerability

55

Highlights From the Unit 42 Cloud Threat Report, 2H 2021

Palo Alto Unit 42Jun 6, 01:20 UTC · Jun 6, 2024Vulnerability

55

Palo Alto Networks Unit 42 helps organizations respond to security alerts and potential threats

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2022Vulnerability

55

THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group

Palo Alto Unit 42Jun 6, 12:19 UTC · Jun 6, 2024Vulnerability CVE-2021-26855 CVE-2021-27065

60

Top CVEs to Patch: Insights from the 2022 Unit 42 Network Threat Trends Research Report

Palo Alto Unit 42Jun 5, 20:14 UTC · Jun 5, 2024Vulnerability CVE-2017-5638 CVE-2017-9841 CVE-2018-19986+26 CVEs1

60

Unit 42 Attack Surface Threat Research: Constant Change in Cloud Contributes to 45% of New High/Critical Exposures Per Month

Palo Alto Unit 42Sep 16, 00:00 UTC · Sep 16, 2023Vulnerability

55

Unit 42 Cloud Security Trends and Tips

Palo Alto Unit 42Jan 28, 20:53 UTC · Jan 28, 2022Vulnerability

55

Highlights from the Unit 42 Cloud Threat Report, 1H 2021

Palo Alto Unit 42Jun 6, 13:26 UTC · Jun 6, 2024Vulnerability

55

Palo Alto Networks Unit 42 Vulnerability Research November 2017 Disclosures

Palo Alto Unit 42Jan 28, 21:28 UTC · Jan 28, 2022Vulnerability CVE-2017-11855 CVE-2017-11856 CVE-2017-11791+1 CVEs

60

Palo Alto Networks Unit 42 Vulnerability Research November 2017 Disclosures

Palo Alto Unit 42Jan 28, 21:28 UTC · Jan 28, 2022Vulnerability CVE-2017-16388 CVE-2017-16389 CVE-2017-16390+4 CVEs

60

Palo Alto Networks Unit 42 Vulnerability Research December 2017 Disclosures

Palo Alto Unit 42Jan 28, 21:27 UTC · Jan 28, 2022Vulnerability CVE-2017-11886

60

Unit 42 Vulnerability Research January 2018 Disclosures

Palo Alto Unit 42Jan 28, 21:27 UTC · Jan 28, 2022Vulnerability CVE-2018-0762

60

Unit 42 Vulnerability Research February 2018 Disclosures

Palo Alto Unit 42Jan 28, 21:25 UTC · Jan 28, 2022Vulnerability CVE-2018-4900

60

Unit 42 Vulnerability Research May 2018 Disclosures

Palo Alto Unit 42Jan 28, 21:25 UTC · Jan 28, 2022Vulnerability CVE-2018-4959 CVE-2018-4961 CVE-2018-4958+1 CVEs

60

Unit 42 Vulnerability Research July 2018 Disclosures

Palo Alto Unit 42Jan 28, 21:23 UTC · Jan 28, 2022Vulnerability CVE-2018-5009 CVE-2018-5021 CVE-2018-5022+5 CVEs

60

Unit 42 Vulnerability Research October 2018 Disclosures

Palo Alto Unit 42Jan 28, 21:23 UTC · Jan 28, 2022Vulnerability CVE-2018-12769 CVE-2018-12832 CVE-2018-12836+7 CVEs

60

CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks

Help Net SecurityApr 17, 09:48 UTC · Apr 17, 2024Vulnerability CVE-2024-3400

60

UPS: Observations on CVE-2015-3113, Prior Zero

Palo Alto Unit 42Nov 1, 09:48 UTC · Nov 1, 2018Vulnerability CVE-2015-3113 CVE-2014-1776 CVE-2014-6332

60

Threat Brief: CVE-2022-3786 and CVE-2022

Palo Alto Unit 42Jun 5, 17:45 UTC · Jun 5, 2024Vulnerability CVE-2022-3786 CVE-2022-36021

60

Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)

Palo Alto Unit 42Jun 5, 17:51 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-41040 CVE-2022-41082 CVE-2021-34473+2 CVEs

60

Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of Credentials

Palo Alto Unit 42Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs

60

Chinese hackers scanning, exploiting Cisco ASA firewalls used by governments worldwide

The RecordApr 27, 00:00 UTC · Apr 27, 2026Vulnerability CVE-2025-20333 CVE-2025-20362

60

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

The Hacker NewsDec 3, 13:34 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077 CVE-2021-40539

60

QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)

Help Net SecurityFeb 14, 00:00 UTC · Feb 14, 2024Vulnerability CVE-2023-47218 CVE-2023-50358 CVE-2023-47565

60

Most Third-Party Cloud Containers Have Vulnerabilities

Infosecurity MagazineSep 29, 11:02 UTC · Sep 29, 2021Vulnerability

55

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

The Hacker NewsMar 31, 13:09 UTC · Mar 31, 2026Vulnerability

55

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

The Hacker NewsJul 11, 04:04 UTC · Jul 11, 2025Vulnerability

55

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+20 CVEs

60

43% Of Cloud Databases Are Currently Unencrypted

Help Net SecurityFeb 7, 00:00 UTC · Feb 7, 2020Vulnerability

55

More than 2,000 Palo Alto Networks firewalls hacked exploiting recently patched zero

Security AffairsNov 22, 06:24 UTC · Nov 22, 2024Vulnerability in the wildCVE-2024-0012 CVE-2024-9474

60

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

The Hacker NewsDec 8, 08:55 UTC · Dec 8, 2023Vulnerability CVE-2023-23397 CVE-2023-38831

60

Realtek Vulnerability Under Attack: Over 134 Million Attempts to Hack IoT Devices

The Hacker NewsJan 31, 02:58 UTC · Jan 31, 2023Vulnerability in the wildCVE-2021-35394

60

Cloud to Blame for Almost all Security Vulnerabilities

Infosecurity MagazineSep 15, 15:00 UTC · Sep 15, 2023Vulnerability

55

Threat Brief: Patch Today and Don’t Get Burned by an Android Toast Overlay

Palo Alto Unit 42Jan 28, 22:08 UTC · Jan 28, 2022Vulnerability

55

High-Risk Cloud Exposures Surge Due to Rapid Service Growth

Infosecurity MagazineAug 14, 14:00 UTC · Aug 14, 2024Vulnerability

55

New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems

The Hacker NewsJul 31, 13:28 UTC · Jul 31, 2023Vulnerability CVE-2022-0543

60

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

The Hacker NewsMar 9, 18:22 UTC · Mar 9, 2026Vulnerability

55

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

Attackers bypass patch in deprecated Windows Server update tool

CyberScoopOct 27, 20:03 UTC · Oct 27, 2025Vulnerability in the wildCVE-2025-59287

60

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

The Hacker NewsJul 22, 07:16 UTC · Jul 22, 2025Vulnerability in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49704+1 CVEs1

60