Inside the Modern SOC: The 72-Minute Race

Palo Alto Unit 42 published a batch of advisories and research covering active exploitation and broad threat trends. Key items: an active-exploitation threat brief for PAN-OS CVE-2026-0257 with IoCs and mitigations; macOS-specific research including a new Tahoe 26 forensic artifact and the FlutterShell backdoor distributed via malvertising (Operation FlutterBridge); supply-chain analyses for npm packages and AI agent “skills”; cloud-logging manipulation and defense-evasion techniques; rising Microsoft Teams phishing threats; tracking of Iranian APT Screening Serpens and ROADtools misuse in the