Unit 42 · Scour

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

Unit 424d4 days ago15 min read

Unit 42Niv Rabin

Inside the Modern SOC: Defending the Cross-Environment Pivot

Unit 425d5 days ago3 min read

Unit 42Sharon Maydar

Atomic macOS (AMOS) Stealer Activity

Unit 426d6 days agoCovered by26 min read

Unit 42Bradley Duncan

Covered by2 sites

malware.news, and more ›

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection

Unit 421w1 week agoCovered by210 min read

Covered by2 sites

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

Unit 421w1 week agoCovered by310 min read

Unit 42Eviatar Garzi

Covered by3 sites

GBHackers Security, and more ›

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

Unit 421w1 week agoCovered by720 min read

Unit 42Rem Dudas

Covered by7 sites

GBHackers Security, and more ›

Unit 42Reese LewisSara McBroom

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Unit 422w2 weeks ago8 min read

Covers 1 story

Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America

Unit 42Renzon CruzNicolas BareilEric Semaan

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Unit 422w2 weeks agoHN Covered by154 min read

Covered by15 sites

The Register, ZDNET, and more ›

Phishing, Technique T1566 - Enterprise | MITRE ATT&CK®, Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Unit 423w3 weeks agoDEV Covered by1215 min read

Unit 42Noam Sala

Covered by12 sites

The Hacker News, Help Net Security, and more ›

Covers 2 stories

Unit 42Tony LiHongliang LiuYuhao Wu

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

Unit 423w3 weeks ago3 min read

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

Unit 424w4 weeks agoDEV Covered by119 min read

Unit 42Sara McBroom

Covered by11 sites

This Week In 4n6, SecurityWeek, and more ›

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

Unit 424w4 weeks ago5 min read

Unit 42Yaron Avital

Energy Sector Incident Report

Identity Abuse Through Trusted Communication Channels

Unit 424w4 weeks agoCovered by315 min read

Unit 42Bill Batchelor

Covered by3 sites

malware.news, and more ›

Covers 1 story

Kimwolf v7: An Evolution of the Kimwolf Botnet

Unit 426w6 weeks agoCovered by1015 min read

The Kimwolf Botnet is Stalking Your Local Network – Krebs on Security

Covered by10 sites

DEV Community, CyberScoop, and more ›

Covers 1 story

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

Unit 426w6 weeks agoCovered by520 min read

Covered by5 sites

GBHackers Security, and more ›

Inside the Modern SOC: The Identity Front Door

Unit 426w6 weeks ago3 min read

ChainDrop: Inside a Self-Propagating npm Worm

Unit 426w6 weeks agoHN Covered by520 min read

Covered by5 sites

The Cybersecurity Pulse (TCP), and more ›

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Unit 426w6 weeks agoCovered by59 min read

Understanding Frontier AI Models and Their Capabilities

Covered by5 sites

GBHackers Security, and more ›

Covers 1 story

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Unit 427w7 weeks agoCovered by510 min read

Covered by5 sites

The Cybersecurity Pulse (TCP), Palo Alto Networks Blog, and more ›