🧰 Unit 42

The items that name it 16

• PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  articleas tools2026-10-30

  Palo Alto Networks research team that independently verified the attacker's tooling and confirmed Dream's reported results.

• Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
  advisoryas classification.key entities2026-10-29
• Unwrapping Retail Peak Season Cyber Threats
  articleas classification.key entities2026-10-28
• EMudhra Intermediate CA Certificates Compromised
  advisoryas classification.key entities2026-10-22
• The Current Landscape of OAuth Attacks
  articleas classification.key entities2026-10-22
• “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
  writeupas classification.key entities2026-10-21
• Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated Oct 20)
  advisoryas classification.key entities2026-10-20
• The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
  articleas classification.key entities2026-10-13
• Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access
  writeupas classification.key entities2026-10-06
• ZeroShield - Securing AI Infrastructure (@zeroshieldai) on X
  threadas classification.key entities2026-10-01
• Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
  advisoryas classification.key entities2026-09-30
• OperTraitors: How Kubernetes Operators Betray Your Security Posture
  articleas classification.key entities2026-09-29
• Prompt Injection Against Coding Agents: The Attack Surface Nobody Owns | Blog | Endor Labs
  articleas classification.key entities2026-09-02
• Prompt Injection Attack Compendium (2026 Edition)
  articleas classification.key entities2026-05-11
• A Threat Actor Abuses Another Free Trial
  writeupas classification.key entities2026-03-06
• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
  articleas toolsIt is written here as Unit 42 (Palo Alto Networks).

  Threat research team documenting multiple npm/PyPI campaigns and malicious Chrome extensions