Holiday Shopping Threat Avoidance

Summary: Cisco Talos predicted malvertising and email spam would be significant cyber crime vectors during the holiday shopping season, especially for mobile shoppers, and found that 94.8% of mobile-related blocks on its Cloud Web Security platform were Android-related. Those blocked Android devices were running older OS versions such as 4.2.2, 4.4.2, and 4.1.2 against a current release of 6.0, and 29.7% of iOS blocks with a Referer header came from m.facebook.com.
What you should know: Adobe expected $83 billion in U.S. online holiday shopping from more than 270 million shoppers, and Android holds 82.8% of worldwide smartphone OS share - much of it on devices that cannot be patched without new hardware, so compromised phones may be handling PII and card data this season.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026