Unwrapping Retail Peak Season Cyber Threats
2026-10-28T20:51:31Z•5dd5467e6fd3cd75c35cd5253f86f9b90c619d10a51badefb54900e0230ead59
CVE-2024-47575CVE-2026-0257CVE-2026-109618CVE-2026-109619CVE-2026-88771CVE-2026-88772AI-assisted-cybercrimeAI-powered-espionageFortiGateFortiManagerKubernetesLinuxNetScalerOAuth-attacksPAN-OSPEERSTITCHRBAC-risk-reduction-programme-or-tooling?TLSactive-exploitationcertificate-authority-compromisecloud-securitycredential-theftinitial-accessman-in-the-middlenetwork-appliancesphishingransomwaresoftware-supply-chainthreat-intelligenceweb-shellszero-day
What happened
Unit 42 RSS feed covering major cyber threat intelligence and vulnerability reporting from September–October 2026. Topics include active exploitation of PAN-OS and NetScaler vulnerabilities, compromised eMudhra certificate authorities, FortiGate targeting with the PEERSTITCH implant, ransomware, OAuth and initial-access attacks, AI-assisted cybercrime and espionage, cloud and software supply-chain attacks, Kubernetes RBAC risks, and infrastructure-focused campaigns. Several reports describe active exploitation or high-impact compromises affecting perimeter appliances and trust infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- paloalto_unit42
- Record identifier
- 5dd5467e6fd3cd75c35cd5253f86f9b90c619d10a51badefb54900e0230ead59
- Enrichment time
- 2026-10-28T20:51:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.