← All stories

AI security

Unit 42 Warns of Peak Season Cyber Threats Targeting Retailers

By Unit 421 min read

Unit 42 has outlined the key cyber threats facing retailers during the peak shopping season, ranging from ransomware to attacks involving artificial intelligence, along with guidance on defending operations and customer trust.

Cover for a ai-security story

Palo Alto Networks' Unit 42 threat intelligence team has published an analysis examining the cyber threats that retailers face during the peak shopping season, a period when the sector's exposure to attack is elevated.

According to Unit 42, the threat landscape for retailers during this period spans ransomware and attacks that involve artificial intelligence. The post explores how these threats put pressure on retail organizations and shares guidance on how companies can defend both their operations and the trust their customers place in them.

Ransomware remains a prominent concern in the firm's assessment, reflecting the continued targeting of the retail sector by extortion-driven actors. Alongside this, Unit 42 highlights attacks involving AI as part of the evolving risk picture retailers must contend with during high-traffic shopping periods.

The analysis frames the peak season as a time when defensive preparation is especially important for retail organizations, given the potential for disruption to business operations and the damage that incidents can inflict on customer confidence.

Unit 42's post aims to help retailers understand the threats most relevant to the season and take steps to protect their operations and maintain customer trust. Further details on the specific threats and recommended defenses are available in Unit 42's original post.

Source: Unit 42

Cover for a ai-security story

AI security

Apple Adds Setting to Exclude Apps from Siri AI, EFF Says

Apple's latest device update, iOS 27.2, introduces a setting that lets users exclude apps from Siri AI features, according to the Electronic Frontier Foundation, which says the change addresses a request from its Encrypt It Already campaign.

1 min read

AI-written summary Source: EFF Updates · Fetched

Cover for a ai-security story

AI security

GitHub's npm package firewall can block brand-new versions before they install

GitHub has announced a package firewall for npm that checks packages against an enterprise's policy before they install, blocking known malware, critical vulnerabilities and brand-new versions, Help Net Security reported. The checks run before a package reaches a developer's laptop, a build or a coding agent.

1 min read

AI-written summary Source: Help Net Security · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.