Threat Brief: Recruiting Scheme Impersonating Palo Alto Networks Talent Acquisition Team

Palo Alto Unit 42 published a batch of March 2026 briefs covering two broad themes: (1) AI and model/agent security — research on prompt-fuzzing and prompt-injection (including web-based indirect attacks), fragility of LLM guardrails and AI judges, risks from agentic AI and AI-enabled malware, and an analysis of Google’s passwordless/passkey architecture; and (2) active threat actor activity and traditional cybercrime — a recruitment phishing campaign impersonating Palo Alto Networks talent acquisition (resume/fee fraud), retail fraud leveraging agentic AI, state-linked espionage and cyberespn