• Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth
  Aug 21, 10:00 AM
• Logit-Gap Steering: A New Frontier in Understanding and Probing LLM Safety
  Aug 20, 11:00 PM
• Fashionable Phishing Bait: GenAI on the Hook
  Aug 19, 10:00 AM
• A Mega Malware Analysis Tutorial Featuring Donut-Generated Shellcode
  Aug 14, 10:00 AM
• Muddled Libra’s Strike Teams: Amalgamated Evil
  Aug 12, 09:00 PM
• Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild
  Aug 11, 10:00 AM
• New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer
  Aug 07, 10:00 AM
• Muddled Libra: Why Are We So Obsessed With You?
  Aug 06, 09:00 PM
• When Good Accounts Go Bad: Exploiting Delegated Managed Service Accounts in Active Directory
  Aug 06, 10:00 AM
• Project AK47: Uncovering a Link to the SharePoint Vulnerability Attacks
  Aug 05, 11:00 PM
• Threat Actor Groups Tracked by Palo Alto Networks Unit 42 (Updated Aug. 1, 2025)
  Aug 01, 01:00 PM
• Introducing Unit 42’s Attribution Framework
  Jul 31, 10:00 AM
• 2025 Unit 42 Global Incident Response Report: Social Engineering Edition
  Jul 30, 10:00 AM
• The Covert Operator’s Playbook: Infiltration of Global Telecom Networks
  Jul 29, 09:00 PM
• The Ηоmоgraph Illusion: Not Everything Is As It Seems
  Jul 25, 09:00 PM
• Cloud Logging for Security and Beyond
  Jul 22, 09:00 PM
• Active Exploitation of Microsoft SharePoint Vulnerabilities: Threat Brief
  Jul 21, 10:48 PM
• Behind the Clouds: Attackers Targeting Governments in Southeast Asia Implement Novel Covert C2 Communication
  Jul 14, 10:00 AM
• Evolving Tactics of SLOW#TEMPEST: A Deep Dive Into Advanced Malware Techniques
  Jul 11, 10:00 AM
• Fix the Click: Preventing the ClickFix Attack Vector
  Jul 10, 10:00 AM