Threat Brief: Mitigating Large-Scale Credential Attacks

Palo Alto Unit 42 published a series of research and threat briefs (June 2026) covering multiple high-risk issues: large-scale credential attacks that have targeted security vendors, an espionage campaign (CL-STA-1062) using a custom TinyRCT backdoor against Southeast Asian governments and critical infrastructure, and AI supply-chain abuse in the OpenClaw/ClawHub skill marketplace that delivered infostealers and agentic financial fraud. Research also describes cloud risks including universal bucket hijacking and a Vertex AI Python SDK vulnerability enabling cross-tenant RCE via bucket squats,操