Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
AzurePalo Alto Unit 42 details TheHatman's August 2026 credential attack campaign
Palo Alto Networks Unit 42 published a threat brief on August 18, 2026, detailing TheHatman's large-scale credential attack campaign that ran from August 1–17, 2026, where the actor exfiltrated ~3.6M employee records from Microsoft Entra tenants and sold them across multiple forums.
TeamPCP Drops New Malware into 42 Microsoft GitHub Repositories
TeamPCP leveraged a stolen GitHub account to publish malicious code into at least 42 repositories and 236 branches spanning the Azure, Azure-Samples, and Microsoft GitHub organizations, extending its ongoing supply-chain campaign against Microsoft-linked projects.
