Unwrapping Retail Peak Season Cyber Threats

2026-10-28T20:51:31Z•5dd5467e6fd3cd75c35cd5253f86f9b90c619d10a51badefb54900e0230ead59
CVE-2024-47575CVE-2026-0257CVE-2026-109618CVE-2026-109619CVE-2026-88771CVE-2026-88772AI-assisted-cybercrimeAI-powered-espionageFortiGateFortiManagerKubernetesLinuxNetScalerOAuth-attacksPAN-OSPEERSTITCHRBAC-risk-reduction-programme-or-tooling?TLSactive-exploitationcertificate-authority-compromisecloud-securitycredential-theftinitial-accessman-in-the-middlenetwork-appliancesphishingransomwaresoftware-supply-chainthreat-intelligenceweb-shellszero-day

What happened

Unit 42 RSS feed covering major cyber threat intelligence and vulnerability reporting from September–October 2026. Topics include active exploitation of PAN-OS and NetScaler vulnerabilities, compromised eMudhra certificate authorities, FortiGate targeting with the PEERSTITCH implant, ransomware, OAuth and initial-access attacks, AI-assisted cybercrime and espionage, cloud and software supply-chain attacks, Kubernetes RBAC risks, and infrastructure-focused campaigns. Several reports describe active exploitation or high-impact compromises affecting perimeter appliances and trust infrastructure.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
paloalto_unit42
Record identifier
5dd5467e6fd3cd75c35cd5253f86f9b90c619d10a51badefb54900e0230ead59
Enrichment time
2026-10-28T20:51:31Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.