ZeroFox Weekly Intelligence Brief – October 24, 2026

ZeroFox Weekly Intelligence Brief – October 23, 2026

ZeroFox’s Weekly Intelligence Briefing highlights the major developments and trends across the threat landscape, including digital, cyber, and physical threats. ZeroFox Intelligence is derived from a variety of sources, including—but not limited to—curated open-source accesses, vetted social media, proprietary data sources, and direct access to threat actors and groups through covert communication channels. Information relied upon to complete any report cannot always be independently verified. As such, ZeroFox applies rigorous analytic standards and tradecraft in accordance with best practices and includes caveat language and source citations to clearly identify the veracity of our Intelligence reporting and substantiate our assessments and recommendations. All sources used in this particular Intelligence product were identified prior to 6:00 AM (EST) on October 22, 2026; per cyber hygiene best practices, caution is advised when clicking on any third-party links.

Read the Brief

View the full report here

PHP Flaws Prompt Government Websites to Go Offline as Precaution

What we know:

• Government agencies and other organizations across the world temporarily took their websites and online services offline as a precaution after two vulnerabilities were found in the PHP language, which powers a large portion of the internet’s websites.
• A major tech company reportedly detected attempts to exploit the flaws against its honeypot infrastructure.
• PHP has released fixes for supported versions, while PHP 8.1 and older remain end-of-life and require migration to a supported release.

NVIDIA RTX 5090 Shipment Goes Missing in Brazil

What we know:

• A Brazilian electronics distributor has reported two pallets of Zotac NVIDIA RTX 5090 graphics cards, valued at approximately BRL 2.5 million (USD 470,000, as of writing), as missing after arriving at Guarulhos International Airport in Brazil.
• The incident reportedly comes amid limited RTX 5090 supply and sharply elevated prices, with the GPU reportedly selling for more than twice its USD 2,000 launch price in some markets.

Cyberattack Forces Bullhorn to Shut Down Staffing Platform

What we know:

• American staffing software company Bullhorn restored services to its major platforms on October 19, 2026, after temporarily disabling access to its recruitment software ecosystem on October 17 to contain a cyber incident.
• The incident caused a system-wide outage of its applicant tracking system (ATS) and customer relationship management (CRM), automation, back-office, and talent platform services.