Skip to content
Surge in Cyberattacks Targeting UK Retailers Ahead of Black Friday

Surge in Cyberattacks Targeting UK Retailers Ahead of Black Friday

First seen 12 Nov 2026, 12:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 12:18 UTC
  • •SonicWall recorded 23.3 million intrusion attempts against UK retailers in 2026.
  • •97% of attacks targeted web applications, with directory traversal being the most common method.
  • •Log4Shell vulnerability continues to be exploited, with significant activity reported.

As Black Friday approaches, UK retailers are facing a significant increase in cyberattacks, with SonicWall reporting 23.3 million high- and medium-priority intrusion attempts and nearly 400,000 malware attacks from January to September 2026. The report highlights a 169% year-on-year increase in intrusion attempts against UK retailers, primarily targeting web applications. Attack methods include directory traversal, remote code execution (RCE), and cross-site scripting. SonicWall noted that the most common attack vector, directory traversal, was recorded 10.5 million times. Additionally, the Log4Shell vulnerability remains active, with over 263,000 hits reported. Criminals are actively mapping the web infrastructure of retailers to exploit vulnerabilities and steal customer data during peak shopping periods.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-11-12
SonicWall report released
SonicWall reported a surge in cyberattacks against UK retailers ahead of Black Friday, with intrusion attempts up 169% year-on-year.
Mezha
2026-11-12
Cybercriminals target retailers
Experts warn that cybercriminals are preparing to exploit vulnerabilities in ecommerce platforms during the holiday shopping season.
TechRadar

More articles in this cluster (2)

Following this threat?

Track Pentagon and CVE-2021-44228 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 4

Common questions

What types of attacks are being reported?
The attacks primarily involve techniques such as directory traversal, remote code execution, and cross-site scripting.
How significant is the increase in attacks?
There has been a 169% year-on-year increase in intrusion attempts against UK retailers.
What should retailers do to protect themselves?
Retailers should enhance their cybersecurity measures, focusing on securing web applications and monitoring for unusual activity.