Unit 42

Everything Threat Times has reported about Unit 42: 4 stories, newest first. Part of our Cyber Attacks coverage.

Cloud Security

Researchers highlight persistent AWS AgentCore security flaws in default configurations

Threat TimesOct 12, 2026

Palo Alto Networks and Zenity Labs report that AWS AgentCore default settings allow credential exfiltration via prompt injection, illustrating broader AI agent risks.

Threat Intelligence

Palo Alto Unit 42 Links Blinder Tunnel Campaign to Iranian Actor Targeting Iraqi Critical Infrastructure

Threat TimesOct 11, 2026

Researchers identify a state-aligned Iranian group using fake recruitment portals and custom malware to compromise aviation and telecom sectors in the Middle East.

Cyber Attacks

Unit 42 Reveals Blinder Tunnel Campaign Targets Iraqi Critical Infrastructure

Threat TimesOct 8, 2026

Palo Alto Networks researchers identify an Iran-nexus operation using fake Dubai Airport recruitment lures and GitHub-based command and control infrastructure to compromise systems.

Cyber Attacks

Palo Alto Unit 42 Reports Web3 Infrastructure Used in Cloud Supply Chain Attacks

Threat TimesOct 8, 2026

Researchers detail how threat actors exploit Web3 tools and open-source components to breach enterprise cloud environments.