Threat Brief: Widespread Impact of the Axios Supply Chain Attack

Collection of Unit 42 threat briefs (Mar–Apr 2026) describing a series of high-impact and active threats: multiple supply‑chain attacks (notably an Axios compromise and TeamPCP campaigns with ties to Vect ransomware), cloud/AI security weaknesses including an over‑privileged “double agent” flaw in Google Cloud Vertex AI and LLM guardrail fragility via prompt fuzzing, ongoing Iranian activity (wiper attacks, Handala Hack/Void Manticore, Boggy Serpens) and regionally focused espionage using custom backdoors/USBfect/RATs, plus recruitment phishing impersonating Palo Alto Networks talent teams and