The journey of a paper unicorn: adventures inside a modern warehouse

Kaspersky's Securelist team published an in-depth research report tracing how a single parcel's journey through a modern warehouse — from unloading to shipment — exposes numerous cyberattack entry points. The researchers show that warehouse management systems (WMS), the software coordinating inventory, picking, sorting and robotics, act as a central nervous system whose compromise can cascade into corrupted stock records, misrouted shipments and halted conveyors and robots. They highlight real-world incidents at Morrisons, United Natural Foods and CEVA Logistics where IT disruptions hit order fulfillment, and point to concrete flaws such as a Bluetooth remote-execution bug in Honeywell barcode scanners (CVE-2026-4272) and an authorization-bypass vulnerability in Oracle Warehouse Management (CVE-2026-70774). The report also describes practical attack vectors like rogue Wi-Fi and Bluetooth access, unsecured network ports hidden in warehouse racking, malicious barcodes that inject keystrokes, and kiosk-mode escapes on portable data terminals and thermal printers, urging operators to adopt network segmentation, zero-trust access and continuous WMS patching to limit the business impact of such attacks.