What security media and vendors’ research teams have published, newest first. A brief is written from what the publisher puts in its feed, says who reports what, and links to the original; where the feed has only a headline, so do we. These are not authorities: read the claims as theirs.
Unit 42 (Palo Alto Networks) · Research ·
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 25)
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
Unit 42 reports a threat actor used AI for cybercrime.
Unit 42 says the actor bypassed AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration. The actor used AI to plan and execute these activities. Unit 42 investigated this threat actor.
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Unit 42 reports top initial access vectors.
Unit 42 says edge exploits, credential abuse and phishing are used to breach organizations. These are the top initial access vectors observed in September 2026. Unit 42 details these vectors.
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
Unit 42 reports an unsophisticated attack on a European bank.
Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure. The attack exposed a third-party risk. Unit 42 says the attack was unsophisticated.