Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?
Pictorial representation of CVE-2026-109618 and CVE-2026-109619 in PHP. Digital illustration of a global network featuring interconnected lines and nodes over a map of the world, highlighted with neon lights and digital elements.
 category iconHigh Profile Threats October 21, 2026

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems.

  • CVE-2026-109618
  • CVE-2026-109619
Read now
 category iconThreat Research October 21, 2026

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

  • API
  • Data exfiltration
  • DeepSeek
Read now
Pictorial representation of PAN-OS CVE-2026-0257. A vibrant city skyline at night, with tall skyscrapers and glowing digital beams extending into the sky, suggesting advanced technology and connectivity.
 category iconHigh Profile Threats October 20, 2026

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)

  • CVE-2026-0257
  • Vulnerability
Read now
Pictorial representation of WebAuthn. A person wearing glasses with computer code reflected in the lenses. The focus is on the eye, and the code is clear and detailed.
 category iconInsights October 16, 2026

Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026

  • Initial Access
  • Threat intelligence
  • Trends
Read now
Pictorial representation of AI-powered campaign targeting government infrastructure. A glowing, blue, brain-shaped structure floats above a central microchip on a circuit board. The scene is futuristic, with neon lights illuminating the interconnected pathways and components.
 category iconThreat Research October 15, 2026

AI-Powered Espionage Campaign Targets Government Linux Infrastructure

  • Exfiltration
  • LLM
  • Network security
Read now
Pictorial representation of PEERSTITCH, a FortiGate implant. A digital illustration depicting a circuit board with a prominent red warning triangle and exclamation mark in the center. The background is filled with various computer circuitry patterns.
 category iconThreat Research October 14, 2026

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

  • Apache
  • CL-STA-0954
  • Logging
Read now
Pictorial representation of a bokeh style graphic showing purple and orange spheres with interconnected white network lines.
 category iconInsights October 13, 2026

The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk

  • Credential-based attacks
  • Incident response
  • Reconnaissance
Read now
Pictorial representation of a laptop with various charts and graphs illuminated on the screen.
 category iconInsights October 7, 2026

Evolution of Web3 in Cloud Supply Chain Attacks

  • Cloud configuration
  • DPRK
  • Supply-chain attack
Read now
Pictorial representation of operation blinder tunnel. Screen displaying code with a prominent alert symbol and the words 'VIRUS DETECTED' highlighted in red.
 category iconThreat Research October 6, 2026

Blinder Tunnel Campaign Targets Iraqi Infrastructure

  • Advanced Persistent Threat
  • Agent Serpens
  • AppDomainManager
Read now
Pictorial representation of NetScaler zero days. Digital illustration of a map of North America with interconnected glowing lines and dots symbolizing network connections across the continent.
 category iconHigh Profile Threats September 30, 2026

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)

  • Citrix
  • CVE-2026-88771
  • CVE-2026-88772
Read now
Pictorial representation of how K8 operators betray your security posture. A close-up of a futuristic microchip with glowing circuits in vibrant colors, including blue, purple, and orange, reflecting light.
 category iconThreat Research September 29, 2026

OperTraitors: How Kubernetes Operators Betray Your Security Posture

  • AI
  • AI agents
  • API
Read now
Pictorial representation of logit-gap steering and LLMs. Abstract digital artwork featuring a cityscape silhouette with glowing blue and orange lights, set against a bokeh background.
 category iconInsights September 25, 2026

3 Consulting Myths Debunked by Unit 42 Experts

  • AI
  • Privilege escalation
  • Unit 42 Incident Response Report
Read now
Pictorial representation of how AWS neutralizes compromised IAM credentials. Digital illustration of a glowing cloud composed of binary code, surrounded by dynamic red and blue light streaks, symbolizing cloud computing technology.
 category iconThreat Research September 21, 2026

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

  • AWS
  • AWS CloudTrail
  • Bedrock
Read now
Loader icon View more
Newsletter
UNIT 42 Small Logo Get updates from Unit 42

Peace of mind comes from staying ahead of threats. Subscribe today.

Subscribe for email updates to all Unit 42 threat research.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Invalid captcha!

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Observability
  • Cortex XCOR
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Prepare for Emerging Risks
  • Strengthen Your Defenses
  • Build Your Security Strategy
  • Understand the Adversary
  • Respond to a Cyber Attack
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language
    Your browser does not support the video tag.

    Default Heading

    Read the article Right Arrow