Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of attackers using AI tools to target Latin American organizations. A vibrant cityscape with silhouettes of numerous people walking along a bustling street. The scene is illuminated by bright urban lights and digital-like particles, creating a dynamic and futuristic atmosphere.
 category iconThreat Research September 3, 2026

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations.

  • Agentic AI
  • ChatGPT
  • CL-CRI-1131
Read now
Pictorial representation of a woman in glasses viewing a reflection of a monitor screen. The reflection features multicolored numbers, arrows, and graphs.
 category iconInsights September 2, 2026

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

  • Agentic AI
  • Frontier AI
Read now
Pictorial representation of vishing campaigns in Microsoft Teams. A digital image of a skull formed by blue binary code on a black background, with scattered ones and zeros and digital noise, symbolizes how stealthy prompt injection attacks can exploit AI logic to bypass security controls.
 category iconThreat Research August 31, 2026

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

  • Cloaked Ursa
  • Entra ID
  • Microsoft Teams
Read now
New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, multi-layered security.
 category iconInsights August 28, 2026

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

  • AI
  • Jailbreak
  • LLM
Read now
Pictorial representation of AI-enabled malware. A vibrant digital interface displaying various icons and graphs, resembling a futuristic network or data analysis dashboard. The scene is illuminated with glowing lights and patterns.
 category iconThreat Research August 25, 2026

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

  • Backdoor
  • Bitcoin
  • DLL hijacking
Read now
Pictorial representation of a male individual viewing multiple monitor screens. The blurred background indicates a female indiviual in the back, also viewing multiple monitor screens.
 category iconInsights August 21, 2026

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

  • ChainDrop
  • Npm packages
  • Software supply-chain attack
Read now
Pictorial representation of identity abuse through trusted communication channels. Close-up view of a digital screen displaying a glitched and pixelated image of a skull-like shape.
 category iconThreat Research August 20, 2026

Identity Abuse Through Trusted Communication Channels

  • Authentication
  • Identity theft
  • Malware
Read now
Pictorial representation of large-scale credential attacks. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.
 category iconHigh Profile Threats August 18, 2026

Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

  • Credential theft
Read now
Pictorial representation of Kimwolf botnet malware family. Digital screen with a warning sign reading "Malware." The background features lines of computer code and graphics, creating a sense of cybersecurity threat.
 category iconThreat Research August 11, 2026

Kimwolf v7: An Evolution of the Kimwolf Botnet

  • Android APK
  • Ethereum
  • HTTP
Read now
Pictorial representatiom pf Aeternum's blockchain C2. A close-up of a computer circuit board with a central microchip is depicted. Red digital data streams in the form of glowing binary numbers and arrows appear to flow in and out of the chip. The scene is illuminated with a futuristic blue and red glow.
 category iconThreat Research August 10, 2026

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

  • Aeternum
  • Infection chain
  • JSON
Read now
Pictorial representation of orange, wave-like lines illuminated against a navy background.
 category iconInsights August 7, 2026

Inside the Modern SOC: The Identity Front Door

  • AI
  • Identity
  • Social engineering
Read now
Pictorial representation of ChainDrop, a self-propagating npm worm. An artistic depiction of a digital workspace featuring an open laptop with a red virus on the screen.
 category iconHigh Profile Threats August 6, 2026

ChainDrop: Inside a Self-Propagating npm Worm

  • Blockchain
  • ChainDrop
  • Claude code
Read now
Pictorial representation of Token-jacking. A person types on a laptop with multiple digital interface elements projected, including an "AI" icon
 category iconThreat Research August 6, 2026

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

  • AI API
  • AI gateway
  • API keys
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Proactive Assessments
  • Incident Response
  • Transform Your Security Strategy
  • Discover Threat Intelligence
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow