Unit 42
35 briefings written from Unit 42's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Why Cybercriminals Target Retailers at Peak Shopping Season, and What to Watch For
- Weak Randomness Exposes Eight eMudhra Certificate Keys, Prompting Browser and OS Revocations
- Why Attackers Are Now Stealing OAuth Tokens to Get Around MFA
- Unit 42 Reveals How One Cybercriminal Used Jailbroken AI Assistants to Plan and Run Multiple Attacks
- Two Critical PHP Flaws Put Millions of Web Servers at Risk, Patch Now
- Ransomware Gangs Target Palo Alto GlobalProtect VPN Flaw That Lets Attackers Skip Login
- Exposed Systems and Stolen Logins Lead the Way Into Networks, Says Unit 42
- AI-Generated Attack Code Used in Long-Running Espionage Campaign Against Government Linux Systems
- Telecom Provider Breached Through FortiManager, Exposing Configuration Data for 500+ Firewalls
- Simple Oversights, Serious Breach: How a Poorly Configured Third-Party Gateway Let Attackers Into a European Bank
- Attackers Are Using Blockchain Smart Contracts to Keep Control of Poisoned Software Supply Chains
- Fake Dubai Airports IT Staff Used Trojanized Coding Tests to Target Critical Infrastructure
- Kubernetes Operators: The Overlooked Backdoor in Cloud Automation
- Two Critical NetScaler Zero-Days Under Active Attack: Patch Now
- More Security Tools Won't Save You: Unit 42 Debunks Common Cybersecurity Myths
- How AWS Automatically Locks Down Leaked Cloud Credentials
- AWS AI Agent Tool Could Let Attackers Steal Credentials via Prompt Injection
- Modern Attacks Don't Stay in One Place, So Your Defences Shouldn't Either
- Fake 'macOS Toolkit' Sites Spreading AMOS Stealer Malware
- New Research Uses Behaviour Patterns to Spot Fake or Malicious Cloud Identities
- Research Reveals How Root Access Can Undermine Kubernetes Identity Systems
- Hidden in Plain Sight: Malware Campaign Uses YouTube and Fake Software to Infect Thousands
- AI-Powered Attacks on Latin American Organizations Reveal Attacker Mistakes
- AI-Powered Cyberattack Breaches Enterprise Network in Hours, Not Weeks
- Voice Phishing Scam Uses Microsoft Teams to Break Into Business Networks
- Study Finds AI Chatbot 'Safety Filters' Are Surprisingly Thin — Here's Why It Matters for Your Business
- AI-Written Malware Is Here — But Your Existing Defences May Already Stop It
- Hackers Are Now Targeting the Tools Behind Your Software, Not Just the Code
- Hackers Are Hijacking Trusted Work Chat Tools to Steal Logins
- Massive Credential Theft Targets Microsoft Entra Users: What SMBs Need to Know
- New Kimwolf v7 Botnet Targets Android IoT Devices with Advanced Evasion Tricks
- New 'Aeternum' Malware Uses Blockchain to Hide Its Command Centre
- Identity Theft, Not Malware: Why 90% of Cyberattacks Now Start With Stolen Logins
- ‘Token Jacking’: How Hackers Are Stealing AI Resources From Businesses
- AI-Powered Scanning Uncovers Over 14,000 Hidden Flaws in Open-Source Software