3 Consulting Myths Debunked by Unit 42 Experts
6 min
AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak
3 sources 4 min
Inside the Modern SOC: Defending the Cross-Environment Pivot
4 min
Atomic macOS (AMOS) Stealer Activity
in the wild 8 min
Hackers Use Claude and GPT-Powered Tools to Help Breach Government and Financial Networks
in the wild 6 min1
Hackers Use LLMs to Generate Exploit Scripts and Automate Post-Exploitation Across Latin America
in the wild 5 min2
Unit 42 Incident Response Archives
Unit 42 Frontier AI Defense Archives
Unit 42 warns AI has shifted balance of power from defenders to attackers
in the wild 4 min1
Code to Cloud Platform Archives
FrostyGoop’s Zoom-In: A Closer Look into the Malware Artifacts, Behaviors and Network Communications
in the wild 15 min1
Prisma Cloud Archives
Multiple Vulnerabilities Discovered in a SCADA System
15 min1
Privileged File System Vulnerability Present in a SCADA System
10 min1
A Deep Dive Into Attempted Exploitation of CVE-2023
in the wild 15 min1
Autoencoder Is All You Need: Profiling and Detecting Malicious DNS Traffic
13 min1
TLD Tracker: Exploring Newly Released Top
15 min
Automatically Detecting DNS Hijacking in Passive DNS
in the wild 14 min
Network Abuses Leveraging High-Profile Events: Suspicious Domain Registrations and Other Scams
in the wild 12 min
Beneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems
10 min
The Smishing Deluge: China-Based Campaign Flooding Global Text Messages
in the wild 15 min1
Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability
15 min
AI Agents Are Here. So Are the Threats.
15 min
When AI Remembers Too Much
15 min