lab
Unit 42 is Palo Alto Networks' threat intelligence and incident response division, tracking cyberattacks, malware, and threat actors.
No evidence-backed relationships are recorded.
Palo Alto Networks pointed Anthropic's unreleased Mythos at its own systems and found 75 vulnerabilities in a month, against a usual rate below five. The defense business it built on that result depends on Anthropic's model and on customers choosing a security vendor over the lab.
Reality
Unit 42 open-sourced OperTraitor, a Kubernetes operator RBAC scanner, and used it to find CVE-2026-6389, rated CVSS 8.8, in IBM's Turbonomic. An attacker who gets into an operator inherits its service account's permissions, so those grants decide how far a single compromise reaches.
Reality
Unit 42 reports endpoint alerts tied to collaboration tools more than quadrupled in 12 months, with 99% linked to chat phishing. Most controls still watch email and logins, not authenticated sessions.
Reality
Palo Alto's threat unit says about 97% of AI-linked malware never leaves sandboxes and VirusTotal, and that what does arrive is caught by detection layers customers already run.
Reality
September's wave altered more than 500 npm package versions and November's backdoored 796, both by republishing under a fresh version number, which is exactly the thing an exact pin declines to fetch.
Reality
Unit 42 worked a ransomware intrusion where the operator handed tactical execution to frontier AI agents, and the chain from a public API endpoint to stolen cloud AI keys closed inside a single working day with no zero-day.
Reality
Unit 42 says the crew reached more than 150 employees at ten or more companies without a single software exploit, which puts Teams federation policy and NTLM relay hardening in scope and leaves the endpoint downstream.
Perspective Coverage
3 publishersReality
SHA pinning drew a clean line through the tj-actions compromise, and then Dependabot began bumping hashes faster than anyone could read them. The claim worth enforcing is the version comment that nothing verifies.
Reality
According to Microsoft Threat Intelligence, every stage after the consent prompt runs on software the environment already trusts, which puts the choke point on Teams federation policy and remote-support install rights.
Reality
Malwarebytes found a page promising 10,000 free months of Claude Max that skips the card and collects Google logins through a fake browser window loaded from a rented, actively maintained widget.
Reality
AWS closed Unit 42's AgentCore finding as informative and put tool scoping on the customer. Every step the agent took to leak the token was a capability someone granted it on purpose. That moves the control into the grant list.
Reality
Unit 42 traced AWSCompromisedKeyQuarantine through three versions since August 2020 and documented the GitHub secret scanning integration that lets AWS attach the policy to an exposed IAM user automatically, with the owner notified afterwards.
Reality
Palo Alto Networks Unit 42 says the pay-per-install marketplace fed gamers and professionals into the same loader, OfferLoader, and its trojanized installers reached corporate endpoints at critical infrastructure and government entities.
Reality
AgentCore Harness enables a root bash tool in every session unless allowedTools says otherwise. AWS closed Unit 42's report as informative, so the scoping falls to whoever declares the agent.
Reality
The figure is Palo Alto Networks' own, drawn from investigations where a single endpoint alert turned out to be one leg of an intrusion running through cloud, identity and SaaS at the same time.
Reality
The actor compromised a cloud environment first and built the framework inside it. The scanning and address rotation ran with little human involvement. The credentials collected belonged to other companies.
Reality
Palo Alto's Unit 42 says a human directing AI agents went from a public API endpoint to cloud keys in under 10 hours in summer 2026. The control that blocked the backdoor attempt was a repository setting.
Reality
Unit 42 followed the copy-paste instructions on Aug. 5, 2026, and watched one Zsh command install AMOS twice over and package a lab Mac's wallet folders and cloud credentials into a single zip.
Reality
Two months of AWS audit logs from 125 environments went through UMAP and HDBSCAN to group more than 40,000 identities by what they actually did, and the classification rules that fell out run in plain SQL.
Reality
Unit 42 committed a fresh, overly permissive AWS key to a random GitHub repository with the usual quarantine policy switched off, then timed how long a cryptojacking crew took to find it and start mining.
Reality
Security · September 11, 2026 · 1 publisher
Product · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Product · September 6, 2026 · 1 publisher
Science · September 5, 2026 · 2 publishers
Leadership · September 5, 2026 · 1 publisher
Security · September 4, 2026 · 1 publisher
Product · September 3, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 2, 2026 · 3 publishers
Build · August 31, 2026 · 1 publisher
Build · August 31, 2026 · 1 publisher
Security · August 28, 2026 · 1 publisher
Science · August 28, 2026 · 1 publisher
Science · August 27, 2026 · 1 publisher
Build · August 24, 2026 · 1 publisher
Security · August 21, 2026 · 1 publisher
Product · August 21, 2026 · 1 publisher
Security · August 18, 2026 · 1 publisher
Security · August 18, 2026 · 1 publisher
Build · August 16, 2026 · 1 publisher
Security · August 14, 2026 · 2 publishers
Security · August 14, 2026 · 1 publisher
Security · August 14, 2026 · 1 publisher
Security · August 14, 2026 · 1 publisher