· ai-devtools

Palo Alto Networks Unit 42 tracks SysGoRAT targeting government Linux servers Oct 2025-Apr 2026

A specific cyber espionage operation focused on Linux systems belonging to governmental and state-backed organizations has been revealed by cybersecurity investigators.


Palo Alto Networks Unit 42 monitored this activity, which they have designated CL-UNK-1211, noting that "CL" signifies cluster and "UNK" denotes unknown. This surveillance period spanned from October 2025 through April 2026.

Earlier coverage

Related coverage

Also worth reading

  1. Angular 20.3.35 and 21.2.26 released, fixing downgraded component template compilation
  2. next.js 16.4.4 released
  3. Trezor warns some of its wallets may hide a seed-stealing implant
  4. AI Vulnerability Finding shows 3% of critical bugs found last month
  5. Langflow tool flaws allow unauthenticated code execution, bypass authentication in versions 1.0.0 through 1.12.8