Unit 42 details a campaign that used fake Dubai Airports recruitment lures and a trojanized Visual Studio project to target an Iraqi infrastructure-sector individual, deploying malware that used GitHub for command and control.
Unit 42 details in-the-wild exploitation of two critical NetScaler vulnerabilities, including attack chains that deploy web shells for command execution and persistence. Its telemetry found 50,277 potentially exposed instances as of Sept. 27, 2026.
Palo Alto Networks’ OperTraitor analysis found excessive permissions in Kubernetes operators, including cluster-wide secret access in IBM’s Prometurbo operator, patched under CVE-2026-6389. Researchers warn outdated OperatorHub components and agentic AI could amplify RB