From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
3 sources 15 min
A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
15 min
One Compromised Kubernetes Node Can Expose Every Workload Identity Running on It
4 min
Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications
4 min
Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection
15 min1
Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker
in the wild 12 min1
Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign
in the wild 5 min3
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE
15 min2
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
in the wild 11 min1
AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs
in the wild 5 min1
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
in the wild 2 min1
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
in the wild 5 min1
Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks
in the wild 3 min1
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams
in the wild
Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety
1
OT Threat Research
Code review used to be the only way to catch these bugs
4 min1
The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution
Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
in the wild1
Identity Abuse Through Trusted Communication Channels
Unit 42 - Latest Cyber Security Research
2 min
TuxBot v3: Inside an IoT Botnet Framework With LLM
15 min1
Unit 42 Deep and Dark Web Service Archives
Patchwork Continues to Deliver BADNEWS to the Indian Subcontinent
in the wild 10 min