Attackers exploiting CVE-2024-47575 on one FortiManager took running configs for more than 500 managed FortiGate firewalls, Unit 42 reports. Patching the manager does not retire the credentials and private keys in that archive.
Perspective Coverage
5 publishers
- Builder
- Builder 30%
- Operator
- Operator 60%
- Investor
- Investor 10%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence70
Fake red-team markers disguised intrusions into government Linux systems, Unit 42 says
Unit 42 tracks CL-UNK-1211, which hit government Linux systems from October 2025 to April 2026 and planted fake red-team markers. Unit 42 has not determined whether a state or a criminal group is behind it.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+10
- Incentives45
- Confidence55
Compromised credentials were enough at a European bank's vendor-managed gateway, Unit 42 reports
Unit 42 says compromised credentials were enough to enter a European bank through a third-party-managed gateway not set to enforce strict authentication. It judged the actor opportunistic, though the months of activity looked like espionage.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence55
buildOne report1 publisher Spain's AEPD receives its first breach notification involving an AI agent as the attack tool
Spain's data protection authority said on 14 September 2026 it received its first breach notification blaming an AI agent. The account is the victim's own and still under analysis, so it is enough to add the scenario to a response plan and too thin to size it.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+10
- Incentives70
- Confidence50
In an unverified leak, Luna Moth's callers keep victims talking while a partner runs the remote session
Luna Moth's leaked vishing playbook, which has not been verified, coaches callers to keep victims calm while a second operator works their machine, Check Point reported. The method needs no new malware, only a phone call and a legitimate remote-support tool, so the defense sits at the help desk.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence45
Unit 42 finds supply-chain malware fetching its C2 addresses from blockchain smart contracts
Unit 42 says supply-chain attackers have moved command-and-control into blockchain smart contracts, so one transaction can re-point an entire botnet or worm. Defenders' useful choke points are now developer machines, CI runners and the chain lookup itself.
Reality
- Evidence55
- Adoption45
- Hype gap+15
- Incentives45
- Confidence55
Unit 42 ties fake coding challenges from Dubai Airports to an Iranian campaign in Iraq
Palo Alto's Unit 42 says an Iranian state-aligned actor it tracks as CL-STA-1178 posed as the Dubai Airports IT department to deliver trojanized coding challenges to high-value targets. Its report ties attacks other vendors reported one at a time into one campaign that hit Iraqi critical infrastructure in March 2026.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence45
Palo Alto Networks pointed Anthropic's unreleased Mythos at its own systems and found 75 vulnerabilities in a month, against a usual rate below five. The defense business it built on that result depends on Anthropic's model and on customers choosing a security vendor over the lab.
Reality
- Evidence45
- Adoption30
- Hype gap+35
- Incentives80
- Confidence50
Unit 42 releases a scanner that scores Kubernetes operators by excess privilege
Unit 42 open-sourced OperTraitor, a Kubernetes operator RBAC scanner, and used it to find CVE-2026-6389, rated CVSS 8.8, in IBM's Turbonomic. An attacker who gets into an operator inherits its service account's permissions, so those grants decide how far a single compromise reaches.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+30
- Incentives70
- Confidence45
Collaboration-tool alerts quadrupled in a year. The inspection budget still sits with email.
Unit 42 reports endpoint alerts tied to collaboration tools more than quadrupled in 12 months, with 99% linked to chat phishing. Most controls still watch email and logins, not authenticated sessions.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives80
- Confidence50
Palo Alto's threat unit says about 97% of AI-linked malware never leaves sandboxes and VirusTotal, and that what does arrive is caught by detection layers customers already run.
Reality
- Evidence55
- Adoption15
- Hype gap+20
- Incentives75
- Confidence55
buildConfirmed2 publishers September's wave altered more than 500 npm package versions and November's backdoored 796, both by republishing under a fresh version number, which is exactly the thing an exact pin declines to fetch.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence58
Unit 42 worked a ransomware intrusion where the operator handed tactical execution to frontier AI agents, and the chain from a public API endpoint to stolen cloud AI keys closed inside a single working day with no zero-day.
Reality
- Evidence50
- Adoption20
- Hype gap+25
- Incentives60
- Confidence55
Unit 42 says the crew reached more than 150 employees at ten or more companies without a single software exploit, which puts Teams federation policy and NTLM relay hardening in scope and leaves the endpoint downstream.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 65%
- Investor
- Investor 7%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence60
buildOne report1 publisher One API call decides whether your SHA pin still means what it says
SHA pinning drew a clean line through the tj-actions compromise, and then Dependabot began bumping hashes faster than anyone could read them. The claim worth enforcing is the version comment that nothing verifies.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence58
According to Microsoft Threat Intelligence, every stage after the consent prompt runs on software the environment already trusts, which puts the choke point on Teams federation policy and remote-support install rights.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives50
- Confidence65
Malwarebytes found a page promising 10,000 free months of Claude Max that skips the card and collects Google logins through a fake browser window loaded from a rented, actively maintained widget.
Reality
- Evidence58
- Adoption40
- Hype gap+12
- Incentives62
- Confidence66
buildOne report1 publisher A malicious support ticket moved an AgentCore agent's vault token to an attacker endpoint
AWS closed Unit 42's AgentCore finding as informative and put tool scoping on the customer. Every step the agent took to leak the token was a capability someone granted it on purpose. That moves the control into the grant list.
Reality
- Evidence36
- Adoption
- Not scored
- Hype gap+18
- Incentives55
- Confidence45
AWS automatically quarantines leaked IAM keys and opens a support case for the affected user
Unit 42 traced AWSCompromisedKeyQuarantine through three versions since August 2020 and documented the GitHub secret scanning integration that lets AWS attach the policy to an exposed IAM user automatically, with the owner notified afterwards.
Reality
- Evidence62
- Adoption58
- Hype gap+8
- Incentives68
- Confidence55
CL-CRI-1171 sold malware installs through YouTube gaming videos for at least two years
Palo Alto Networks Unit 42 says the pay-per-install marketplace fed gamers and professionals into the same loader, OfferLoader, and its trojanized installers reached corporate endpoints at critical infrastructure and government entities.
Reality
- Evidence45
- Adoption58
- Hype gap+10
- Incentives70
- Confidence52