Unit 42 Threat Intelligence Highlights - Nov. 2, 2026

Unit 42 threat intelligence highlights critical vulnerabilities and active exploitation affecting PHP, PAN-OS, FortiGate/FortiManager, and NetScaler, alongside campaigns involving ransomware, espionage, credential theft, web shells, OAuth abuse, AI-assisted cybercrime, cloud and software supply-chain attacks, and Kubernetes privilege risks. The most urgent items are actively exploited or potentially zero-day edge-device vulnerabilities and compromised certificate authority keys enabling unauthorized TLS signing and man-in-the-middle attacks.