Kaspersky Security Services published a threat-model paper on how attackers can compromise modern logistics warehouses. It follows an order through eight fulfillment stages: unloading, receiving, putaway, storage, picking, sorting, packing and shipment. The paper identifies the warehouse management system (WMS) as the highest-value target…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
Insikt Group (Recorded Future) observed a 48% rise in reported cyberattacks on Japanese organizations between Q2 and Q3 2026, from 621 to 918 incidents. Masaaki Taira, head of Japan's NCSH, declared a "state of emergency in cyberspace". Victims span retail, rail, logistics, media, education and software. Incidents involved ransomware, sto…
Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…
The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…