/
data_types_exposed:api_keys × latest_source_host:unit42.paloaltonetworks.com × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · medium

Unit 42 releases OperTraitor, finds over-privileged Kubernetes operators incl. IBM Prometurbo (CVE-2026-6389) and Datadog Operator

Unit 42 (Palo Alto Networks) released OperTraitor, an open-source, LLM-powered tool that ingests RBAC configurations from installed Kubernetes operators and the OperatorHub catalog. It compares an operator's documented function with its granted privileges and assigns a 1-10 risk score. The research found abandoned, overly permissive opera…

CVE-2026-6389
unit42.paloaltonetworks.com · high

DPRK-linked supply chain campaigns (ChainDrop, PolinRider) use Web3 blockchain C2 to steal cloud credentials from developer and CI/CD environments

Unit 42 reports that threat actors are moving supply chain malware C2 from hardcoded endpoints to Web3 mechanisms, so an entire botnet or worm infrastructure can be re-pointed with a single blockchain transaction. The ChainDrop npm worm (Shai-Hulud family, 400+ npm packages) and the PolinRider campaign (npm, Go modules, Packagist) target …

Alluring Pisces Sapphire Sleet technology software development