Unit 42 (@Unit42_Intel) header
Unit 42 (@Unit42_Intel) profile picture

The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.

Joined December 2015
22 million exposed PHP instances. Two critical vulnerabilities, each with a CVSS score of 9.2. As frontier AI accelerates vulnerability discovery, patch-to-exploit windows are shrinking. Manual remediation alone can't keep pace. Lee Klarich shares what organizations must do now. bit.ly/3WDPFzD
7
25
6
82
7,268
Frontier AI reduces attack speeds by up to 97%, letting threat actors exploit vulnerabilities and exfiltrate data in under an hour. @Unit42_Intel Continuous Frontier AI Defense uses defender-grade AI models to continuously discover exposures before they can be exploited🛡️ bit.ly/4yDUgQK
1
4
17
3,249
🚨 Armed with AI, threat actors now weaponize vulnerabilities in minutes. Human-speed defense can’t keep up. Meet @Unit42_Intel Continuous Frontier AI Defense: leading frontierAI models + elite security experts to find, validate, and fix exposures. Giving the advantage back to defenders. bit.ly/4rvQWo8
3
3
1
13
5,648
Defenders can now test exploitability and validate attack paths before attackers act. Through an expanded agreement with @AnthropicAI, @Unit42_Intel Exposure Analysis is integrating Claude Mythos 5. Guided by Unit 42 experts, this model helps defenders find hidden exposures and prioritize fixes. See how this integration empowers defenders. bit.ly/4cWjGjx
6
8
48
4,465
Through our partnership with @OpenAI, Unit 42 is expanding Frontier AI Exposure Analysis. GPT-5.6-Cyber and our new multi-model harness help simulate adversaries, validate attack paths, and prioritize what to fix first. Learn more. bit.ly/4hoD0Jr
4
6
18
3,718
We're excited to welcome Sherrod DeGrippo as Head of Threat Intelligence for @Unit42_Intel. As AI reshapes the threat landscape, Sherrod's leadership will help strengthen the actionable threat intelligence defenders rely on to stay ahead. Welcome, Sherrod! 🎉
4
4
1
63
4,871
Unit 42 retweeted
Iranian hackers have posed as job recruiters to target software engineers in the aviation sector as part of an elaborate espionage scheme during the US and Israeli war with Iran, cybersecurity researchers tell CNN. cnn.it/3RUyl7a
91
110
4
264
126,849
Unit 42 retweeted
AI agents are rapidly becoming more capable, helping people automate decisions, orchestrate workflows, and take action across the enterprise. But as agents become more autonomous, the big question becomes: how do you deploy them without losing control? Introducing the AWARE framework – a new framework for secure AI agent deployment, developed by the Work AI Institute at Glean in collaboration with @Databricks and @PaloAltoNtwks. glean-it.com/4uFq5XQ
1
2
7
2,624
Unit 42 retweeted
🚨 New threat intel from @PaloAltoNtwks' @Unit42_Intel 🚨 A rogue virtual machine uncovered during an IR investigation provides insight into the operational playbook of Muddled Libra (aka Scattered Spider / UNC3944). This analysis breaks down the TTPs retailers and hospitality orgs need to watch in 2026: rhisac.org/threat-intelligen…
4
11
2,311
🛡️ We added Samsung mobile devices out-of-bounds write vulnerability CVE-2025-21042 to our Known Exploited Vulnerabilities Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec
38
1
92
14,676
.@PaloAltoNtwks' @Unit42_Intel revealed a new risk: Agent2Agent prompt injection. Malicious #AI agents can now manipulate others into leaking data or taking unauthorized actions through multi-turn A2A sessions. #cybersecurity #CISO #infosec #ITsecurity bit.ly/47FXwib
1
6
1
7
4,042
👻 Cyber-ghosts giving you chills? Who you gonna call? @Unit42_Intel! Your 24/7 expert responders that are ready to contain threats fast and strengthen your defenses before the next scare. bit.ly/4onoSAY
4
5
4,051
Will 2025 be the year of disruption? Cyberattacks are about to hit unprecedented speed and scale: 🔶 GenAI-powered breaches 100x faster 🔶 Evolving ransomware tactics 🔶 Critical infrastructure in the crosshairs Explore @Unit42_Intel's 2025 predictions. bit.ly/3VcHyqf
6
20
3,900
For more details and ongoing updates, please refer to our security advisory, found here: bit.ly/3BFEP1Q
2
10
1
25
10,296
🚨 @Unit42_Intel researchers have found evidence that a Russian hacking group has been using luxury car ads as a phishing lure to infect devices with malware. Details from @axios. #APT28 axios.com/2024/08/02/russian…
1
12
1
23
5,039
At @PaloAltoNtwks @Unit42_Intel, #LifeAtPaloAltoNetworks means flexibility, training and support from Lauren’s UK DFIR team.🧡 She reflects on her first eight months here and what sets our workplace apart: bit.ly/3v0mIR6
1
2
4
2,968
Important #cybersecurity update: #InsidiousTaurus (aka #VoltTyphoon) exploits legacy VPNs. We’re extending our no-cost, no obligation bundle: 👉 @Unit42_Intel assessment + mitigation support 👉 90 days of #PrismaAccess for VPN replacement Reach out now: bit.ly/4bJfNfz
4
14
3,131
Your security is our priority. If you have been affected by #Ivanti vulnerabilities, our no-cost emergency bundle can help. This includes: 📌@Unit42_Intel Attack Surface Assessment 📌90 days of #PrismaAccess for VPN replacement Reach out now. bit.ly/488P35f
4
22
1
111
58,919
While several prominent ransomware groups fell in 2023, at least 25 newcomers emerged, contributing to nearly 25% of the ransomware posts on leak sites last year. 👤💻 But there's a silver lining. Discover more in @Unit42_Intel's Ransomware #Cybersecurity Retrospective.

12
13
3,439
Software vulnerabilities are common. Threat Vector shares why #Ivanti is different. 🎧 bit.ly/3SPq56M🎧
2
9
14
3,858