Organization
5 Interestana reports mention Palo Alto Networks Unit 42, newest first. Each is summarised from the original reporting and links back to its publisher.
Cybersecurity researchers have identified a new iteration of the Kimwolf/AISURU botnet, designated as Kimwolf v7, which exhibits enhanced capabilities for distributed denial-of-service (DDoS) attacks and improved operational resilience. Palo Alto Networks Unit 42 researchers first observed this updated version…
An open-source artificial intelligence agent, identified as Hermes, was employed to automate post-exploitation activities during a security incident at Thailand's Ministry of Finance. The threat actor utilized Hermes in an unattended mode, specifically referred to as "YOLO"…
A Go-based botnet identified as NadMesh began actively targeting exposed AI services in early July. The botnet's operator claims to have collected 3,811 unique AWS keys through its operations. NadMesh utilizes a Shodan harvester to continuously identify vulnerable AI platforms…
A Chinese-speaking advanced persistent threat (APT) actor, identified as CL-STA-1062, has deployed a new custom backdoor named TinyRCT in cyberattacks targeting government entities and critical infrastructure in Southeast Asia. Palo Alto Networks Unit 42 reported this activity, noting…
A vulnerability in the Google Cloud Vertex AI SDK for Python allowed attackers to hijack machine learning model uploads and execute code within Google's serving infrastructure, according to Palo Alto Networks Unit 42.