Inside the Modern SOC: The Identity Front Door

Unit 42 RSS intelligence covering identity attacks, npm and CI/CD supply-chain worms, AI credential and token theft, autonomous vulnerability discovery and exploitation, malware C2 evasion, passkey implementation weaknesses, XCSSET macOS malware, Russian and Chinese-speaking threat activity, Siemens OT zero-days, IoT botnets, ransomware, and Vidar Stealer campaigns. The collection includes multiple high-impact topics, but most entries are research or threat reporting rather than disclosures tied to specific CVE identifiers.