NEW YORK, Oct. 19, 2026 /PRNewswire/ -- Stock Preachers News Commentary - U.S. 10-year Treasury yields fell about 17 basis points last week while the Nasdaq 100 dropped 5.5%, the largest same-week decline in both since the April 2025 tariff turmoil, Bloomberg reported. The move caught investors who had positioned heavily for a deeper slump in bonds, after 10-year yields climbed over the prior seven months to their highest levels in more than two decades. Active Companies from around the markets with current developments this week include: iShares 20+ Year Treasury Bond ETF (NASDAQ: TLT), iShares 7-10 Year Treasury Bond ETF (NASDAQ: IEF), ProShares UltraShort 20+ Year Treasury (NYSE Arca: TBT), Invesco QQQ Trust (NASDAQ: QQQ), CoreWeave, Inc. (NASDAQ: CRWV).

The trigger was a sell-off in AI-linked technology stocks. As shares fell, Treasuries showed early signs of acting like a safe haven again, a role they have failed to play for much of the past few years, partly because oil-driven sell-offs can push stocks and bonds lower together. Commodity trading advisers, the trend-following funds that had built bearish Treasury futures positions at what Bloomberg described as 'extremely short' levels, exited those bets last week, adding fuel to the rally.

Rate expectations had swung hard. Traders at one point priced about a 50% chance of a Federal Reserve rate hike in October, and still expect one increase by year-end and another in 2027, according to Bloomberg. At the same time, the AI build-out has leaned on bond markets: investment-grade companies, led by megacap technology, have sold about $1.7 trillion of bonds this year, up about 29% from a year earlier.

"To paraphrase Mark Twain, rumors of the death of US Treasuries are greatly exaggerated," James Athey, a portfolio manager at Marlborough Investment Management, told Bloomberg.

Bond and tech charts told this story in real time. Learn how to read them with the free Stock Preachers guide at stockpreachers.com

In other industry developments and happenings in the market this week include:

iShares 20+ Year Treasury Bond ETF (NASDAQ: TLT)

The long end did the heavy lifting. The iShares fund, which tracks U.S. Treasuries with more than 20 years to maturity, rose 2.65% last week, from $77.98 at the October 9 close to $80.05 on October 16, according to Stock Analysis data. The fund holds about $47 billion in assets and charges a 0.15% expense ratio. Long-dated bonds move the most in price when yields change, which is why the long end led the rally.

iShares 7-10 Year Treasury Bond ETF (NASDAQ: IEF)

The intermediate fund gained 1.14% over the same period, from $89.40 to $90.42, with about $41 billion in assets. Some strategists favor intermediate maturities as the hedge. Julius Baer found that 10-year Treasuries consistently delivered positive returns during equity drawdowns from 2000 to 2020, and fixed-income strategist Afonso Borges said intermediate Treasuries "should again serve as an effective portfolio hedge," Bloomberg reported.

ProShares UltraShort 20+ Year Treasury (NYSE Arca: TBT)

For investors on the other side of the trade, last week hurt. The ProShares fund seeks two times the inverse of the daily performance of the ICE U.S. Treasury 20+ Year Bond Index, and it fell 5.07%, from $42.05 to $39.92. ProShares notes that returns over periods longer than one day can differ significantly from that daily target.

The fund is a simple read on how the short-bond trade fared. Its steepest drop came on October 15, when it lost 2.94% as the 10-year yield fell 10.5 basis points, according to TheStreet.

Leveraged funds like this one reward timing. The free Stock Preachers guide walks through the chart basics traders use to time entries and exits, at stockpreachers.com.

Invesco QQQ Trust (NASDAQ: QQQ)

The Invesco fund that tracks the Nasdaq 100 fell 5.52% last week, from $751.27 to $709.80, matching the index's 5.5% slide. It dropped 1.97% on October 14, the day a hotter-than-expected inflation report pushed yields higher, and another 2.50% on Friday as the AI sell-off resumed.

CoreWeave, Inc. (NASDAQ: CRWV)

CoreWeave became the market's clearest gauge of stress in AI debt. The shares fell 25.21% last week, from $82.08 to $61.39, including drops of 15.46% on October 14 and 11.91% on October 16. The spread on its five-year credit default swaps hit a record of about 1,195 basis points on October 15, and the yield on its October 2031 bond rose above 16%, The Motley Fool reported, citing roughly $52 billion in loans and lease obligations.

"If investors are seeing their AI-linked bonds losing value, they will be less interested in buying new bonds," John Briggs, head of U.S. rates strategy at Natixis North America, told Bloomberg.

Want to spot the next turn in bonds, tech or the AI trade on the chart first? Download the free Stock Preachers guide to reading charts, plus The Roadmap market reports, at stockpreachers.com.

Contact Information:

Media Contact: [email protected]

DISCLAIMER: Nothing in this publication should be considered as personalized financial advice. We are not licensed under securities laws to address your particular financial situation. No communication by our employees to you should be deemed as personalized financial advice. Please consult a licensed financial advisor before making any investment decision. This is not a paid advertisement and is neither an offer nor recommendation to buy or sell any security. We hold no investment licenses and are thus neither licensed nor qualified to provide investment advice. The content in this report or email is not provided to any individual with a view toward their individual circumstances.

This article is independent news commentary. Stock Preachers is wholly owned and operated by Market Equities Limited ("MEL"), a company incorporated under the laws of Ireland. MEL has not been paid by any fund sponsor or company mentioned in this article. MEL and its owners, operators, directors, and affiliates do not currently own any shares of the funds or companies mentioned in this article, but reserve the right to, and will, buy and sell shares of those funds and companies at any time without further notice. Weekly price changes are from the October 9, 2026 close to the October 16, 2026 close based on Stock Analysis data and do not include distributions. Information is drawn from fund sponsors, published reporting and third-party data believed to be reliable, but its accuracy is not guaranteed. Investing in securities carries risk, including the loss of some or all of your investment. This document is governed by the laws of Ireland.

SOURCE Stock Preachers

Share this article

First-of-its-kind shopping app pairs artificial intelligence with same-day delivery, bringing luxury

and contemporary brands directly to customers' doorsteps 

Featured luxury and contemporary brands include AllSaints, John Varvatos and Aritzia

MIAMI, Oct. 19, 2026 /PRNewswire/ -- InstaMall, a first-of-its-kind shopping app offering same-day delivery and access to real-time inventory across luxury and contemporary fashion, launches today in Miami, Florida. Now available via iOS and Android, InstaMall provides access to more than 80 contemporary and luxury fashion brands across Miami's five premier retail clusters, including Balmain, Louis Vuitton, Bottega Veneta, Ganni, Coach, Diesel, Reformation, Aritzia, Cult Gaia, Prada and more. InstaMall will add more brands within the app in the coming weeks and seasons.

Sitting at the intersection of fashion, technology and commerce, InstaMall brings inspiration and purchase together through a more dynamic way to discover and shop for fashion. The experience combines access to luxury and contemporary brands with the convenience of same-day delivery, bringing the speed customers have come to expect across categories like food and groceries to fashion while maintaining the brand experience retailers and shoppers expect.

Within the app, customers will have access to InstaMall's AI-powered stylist and virtual try-on features, making it easier to browse, discover and shop styles online. InstaMall's AI Stylist serves as an intelligent shopping assistant that responds to customers' preferences in real time. Customers can use the AI Stylist to receive product recommendations, build outfits, ask questions and discover new styles, while its virtual try-on feature allows them to visualize select items on themselves before making a purchase.

"InstaMall was founded on the belief that the convenience customers have come to expect from same-day delivery should extend to the way they shop for fashion," said Elliot Aboud, Founder and CEO of InstaMall. "As fashion and technology continue to evolve together, we saw an opportunity to create a more seamless shopping experience that brings customers closer to the brands they love, combining a curated assortment, AI-powered styling and virtual try-on with the ease and convenience of same-day delivery."

Prior to founding InstaMall, Elliot Aboud helped build the Aroma360 and Hotel Collection brands, overseeing the launch of the first retail store and expanding the retail footprint to more than 30 stores across the United States and two in Dubai. InstaMall is bringing fashion and luxury to the next generation with its seamless shopping experience and wide selection of brands.

Customers can download InstaMall through the Apple App Store or Google Play, or by going to instamall.co.

About InstaMall

InstaMall is a same-day fashion shopping and discovery app reimagining how consumers shop for luxury and contemporary brands. Sitting at the intersection of fashion, technology and commerce, InstaMall brings inspiration and purchase together in an experience that gives consumers a more dynamic way to discover and shop. Where on-demand delivery has long existed for categories like food and groceries, InstaMall brings that same convenience to luxury fashion for the first time, delivering the same day without compromising the brand experience fashion retailers and their customers expect. The company launched publicly in Miami on October 16, 2026, and plans to expand nationally. For more information, please visit instamall.co.

SOURCE InstaMall

Share this article

DELRAY BEACH, Fla., Oct. 19, 2026 /PRNewswire/ -- According to MarketsandMarkets™, the Electric Vehicle Market is predicted to grow from USD 794.59 billion in 2026 to USD 1,312.73 billion in 2035 at a CAGR of 5.7%.

Browse 260 market data Tables and 90 Figures spread through 400 Pages and in-depth TOC on "Electric Vehicle Market"

Electric Vehicle Market Size & Forecast:

- Market Size Available for Years: 2022-2035

- 2026 Market Size: USD 794.59 Billion

- 2035 Projected Market Size: USD 1,312.73 Billion

- CAGR (2026–2035): 5.7%

Rolling Stock Market Trends & Insights:

- BEV Growth Is Being Driven by Decreasing Battery Cost and Increasing Charging Performance and Powertrain Efficiency.

- Passenger Cars Remain the Core EV Segment as Platform Economics and Technology Improve.

- China is set to be the largest market in Asia Pacific during the forecast period.

Download PDF Brochure: https://www.marketsandmarkets.com/pdfdownloadNew.asp?id=209371461

The market is on a steady growth path, supported by rising consumer demand, government measures to reduce transport emissions, and advancements in battery and charging technologies that enable higher driving ranges, lower battery costs, and faster charging times. Rising and volatile fuel prices are adding to the economic case for EV adoption, as electric cars generally have lower running costs than internal combustion engine vehicles. The IEA estimates that the increase in oil prices during 2026 raised the annual fuel cost savings from driving an EV in the European Union by 35% compared with 2025, while EV sales increased strongly in several markets during the second quarter of 2026. Global electric car sales reached more than 20 million units in 2025, up 20% year on year, with EVs accounting for one in four new cars sold worldwide. Consumer acceptance is also broadening as model availability, affordability, driving range, and charging access improve. Nearly 1,000 electric car models were available globally in 2025, while the number of EV models available in India increased from 33 to 45 between 2024 and 2025. The development of charging infrastructure is further supporting this shift by improving access to convenient charging, including along long-distance travel corridors. Improvements in energy-dense batteries, efficient thermal management systems, power electronics, and lightweight vehicle designs are enabling manufacturers to introduce EV products that meet wider consumer requirements. As the market evolves, both plug-in hybrid and fully electric platforms are creating overlapping demand for components. This has increased the use of conventional powertrain parts alongside EV-specific solutions such as lithium iron phosphate battery packs, high-efficiency inverters, and advanced cooling systems. Automakers are therefore expanding model portfolios across vehicle sizes and body types while balancing affordability, performance, driving range, and reliability.

OEMs are making targeted investments to address cost and adoption challenges. For example, Tesla is expanding localized battery production with its Gigafactories in the US and Mexico, while Volkswagen is investing in software-driven energy management systems to optimize efficiency. Hyundai is building scalable EV platforms to serve multiple vehicle types across regions. These initiatives help improve cost structures and accelerate EV adoption by making vehicles more affordable and efficient. Partnerships between automakers and suppliers are also growing, helping to overcome supply chain disruptions, meet safety standards, and enhance performance. Combined with government incentives, tax credits, and increased consumer awareness, these developments are redefining mobility trends and reinforcing the long-term outlook for electric vehicles. The global electric 4-wheeler market is moving into a broader adoption phase, with more than 20 million electric cars sold in 2025 and EVs reaching 25% of global new car sales. Growth is increasingly supported by lower-cost models and expanding model availability, particularly in emerging markets, while regional performance remains closely linked to government incentives, emissions regulations, and local EV production. The availability of electric models is expanding rapidly, with nearly 1,000 electric car models available worldwide in 2025, representing around 40% of the approximately 2,500 car models available globally. The number of electric models increased by more than 25% in 2025, and the IEA expects global availability to exceed 1,100 models in 2026 based on announced OEM launches. Model availability is also expanding across larger vehicle segments, with SUVs accounting for around half of available electric models in 2025, supporting greater consumer choice and creating additional revenue opportunities in higher-value vehicle body types. India illustrates this transition, with electric car sales increasing 75% in 2025 to 165,000 units, while the number of electric models available in the country increased from 33 to 45.

According to the IEA, global electric vehicle sales are projected to account for 29% of total car sales worldwide in 2026, driven by a significant second-quarter surge and shifting consumer habits amid fluctuating global energy markets.

- More than 20 million electric cars were sold globally in 2025, representing 25% of new car sales. The important implication is that EVs are no longer limited to a small premium segment. Growth is increasingly being supported by greater model availability, improving affordability, and stronger competition among manufacturers.

- Electric car sales outside these three major markets reached 2 million in 2025, up almost 50%. In emerging and developing economies excluding China, sales increased about 80%, largely because lower-cost Chinese EVs are expanding consumer access to electric cars.

- Europe illustrates the policy effect, with sales increasing more than 30% following the implementation of stricter EU CO2 standards. Germany also benefited from more affordable EV models, which contributed to a roughly 6% decline in average BEV prices. This suggests that future market expansion will depend not only on incentives but also on manufacturers' ability to offer cost-competitive EVs across mainstream vehicle segments.

BEV Growth Is Being Driven by Decreasing Battery Cost and Increasing Charging Performance and Powertrain Efficiency

The battery electric vehicle (BEV) segment is expected to remain the largest growth segment as improvements in battery economics and charging performance increasingly address the main technical barriers to mass adoption. Battery cost is becoming a stronger enabler, with global EV battery deployment increasing almost 30% to 1.2 TWh in 2025, while average battery prices declined 8%. According to the International Energy Agency (IEA), LFP batteries accounted for more than 55% of global EV battery deployment in 2025, up from nearly 50% in 2024. The increasing adoption of LFP is supported by its lower material costs and reduced dependence on nickel and cobalt, making the chemistry increasingly important for cost-competitive mass-market BEVs. Charging performance is also becoming a competitive differentiator, reducing the need for oversized battery packs to deliver practical driving range. In March 2026, BYD introduced its second-generation Blade Battery with FLASH Charging, supporting 10% to 97% charging in 9 minutes at up to 1,500 kW, alongside plans for 20,000 FLASH charging stations in China by the end of 2026. Battery technology is also moving toward higher energy density and faster charging, with CATL unveiling in April 2026 a next-generation battery supporting a 1,000 km range and a Shenxing battery capable of charging from 10% to 98% in under seven minutes. BEV growth is increasingly being supported by lower battery costs, higher energy density, faster charging, and improved powertrain efficiency, allowing OEMs to improve vehicle usability without relying solely on larger battery capacities.

Request for Proposal: 

https://www.marketsandmarkets.com/requestsampleNew.asp?id=209371461

Passenger Cars Remain the Core EV Segment as Platform Economics and Technology Improve

The passenger car segment is expected to retain the largest share of the electric vehicle market, supported by the increasing economic and technical competitiveness of EV platforms. Battery cost, charging speed, vehicle efficiency, and platform scalability are becoming the main factors influencing OEM investment and product deployment. According to the International Energy Agency (IEA), global electric car sales exceeded 20 million units in 2025, representing 25% of new car sales, while BEVs increased their share of electric car sales to 65%. The technology focus is shifting toward higher energy density, faster charging, lower vehicle weight, and more efficient electric powertrains, allowing OEMs to improve range without continuously increasing battery capacity. BMW's 2026 Neue Klasse platform illustrates this transition, with its sixth-generation eDrive technology using an 800-volt architecture, cell-to-pack battery integration, and cylindrical cells with 20% higher cell-level energy density. The BMW iX3 can add up to 372 km of range in 10 minutes at a 400 kW charger, while the new BMW i3 is designed for up to 900 km of range and 400 km of added range in 10 minutes.

Ultra-fast charging is also becoming a vehicle platform differentiator. In March 2026, BYD introduced its second-generation Blade Battery and FLASH Charging system, supporting charging power of up to 1,500 kW, with a 10% to 97% charge in nine minutes. BYD also planned 20,000 FLASH charging stations in China by the end of 2026, linking vehicle battery capability with dedicated high-power charging infrastructure. The regulatory environment is reinforcing passenger car electrification, particularly in Europe.

New location will advance CF3D technology development and strengthen collaboration with the region's aerospace, defense and space industries

COEUR D'ALENE, Idaho, Oct. 19, 2026 /PRNewswire/ -- Continuous Composites Inc., a leader in advanced composite manufacturing technology, today announce it is opening an engineering facility in Kent, Washington. The approximately 5,600-square-foot facility will support the continued development of the company's patented Continuous Fiber 3D Printing (CF3D®) technology and expand its ability to collaborate with aerospace, defense and space companies throughout the Pacific Northwest.

Located in the heart of the Kent Valley, one of the nation's most concentrated aerospace and advanced manufacturing corridors, the facility will provide access to a highly skilled technical workforce and an established network of aircraft, spacecraft, defense, materials and precision-manufacturing companies. The Kent engineering team will advance CF3D technology, develop high-temperature composite components, and collaborate with customers and industry partners.

"Establishing an engineering presence in Kent places Continuous Composites closer to many of the organizations shaping the future of aerospace and defense manufacturing," said Steve Starner, CEO of Continuous Composites. "This facility will allow our engineers to engage more directly with industry partners, accelerate the development of CF3D technology and explore new applications where automated composite manufacturing can address critical performance, cost and production challenges."

CF3D is an automated manufacturing process that combines continuous fiber reinforcement with rapid-curing thermoset materials. By placing continuous fibers along complex, three-dimensional paths, the technology creates new opportunities to consolidate assemblies, reduce weight, improve structural performance and automate the production of advanced composite components.

The Kent facility represents the latest step in the company's continued expansion. In April 2026, Continuous Composites moved into a new 17,000-square-foot headquarters and manufacturing facility in Coeur d'Alene, Idaho, more than doubling its footprint to accommodate a growing team, expanding program portfolio and increasing demand for CF3D technology.

"Kent Valley offers a rare combination of aerospace heritage, advanced manufacturing expertise and emerging space innovation," Starner added. "Combined with our expanded headquarters and manufacturing operations in Coeur d'Alene, this new engineering facility strengthens the infrastructure and technical capabilities needed to support our continued growth."

Additional information regarding employment opportunities and the facility's opening timeline will be announced as plans are finalized.

About Continuous Composites

Continuous Composites is delivering the future of manufacturing through its patented Continuous Fiber 3D Printing (CF3D) technology. Combining advanced materials, software-directed fiber placement, and automation, the company develops manufacturing capabilities and composite structures for aerospace, defense, and uncrewed systems. Its integrated approach connects design and development with a path toward repeatable production.

Media Contact

Liz Schmittou

Director of Marketing

Continuous Composites Inc.

[email protected] 

SOURCE Continuous Composites

Share this article

DELRAY BEACH, Fla., Oct. 19, 2026 /PRNewswire/ -- According to MarketsandMarkets™, the global Fuel Gas System Market for combined-cycle power plants size is projected to grow from USD 1,410.2 million in 2026 to USD 1,837.7 million by 2031 at a compound annual growth rate (CAGR) of 5.4% during the forecast period.

Browse 223 market data Tables and 61 Figures spread through 267 Pages and in-depth TOC on "Fuel Gas System Market – Global Forecast to 2031."

The global Fuel Gas System Market for combined-cycle power plants is growing steadily, supported by rising demand for reliable fuel delivery, gas-quality management, and safe gas turbine operation. The growing complexity of natural gas supply streams, variations in gas composition, and stricter fuel-quality requirements are increasing the importance of fuel gas conditioning systems in CCGT applications. In addition, the expansion of LNG-based gas supply chains and the development of gas-to-power infrastructure are supporting the adoption of fuel gas systems that can manage different gas supply conditions.

The market is also being shaped by increasing demand for automated fuel gas solutions. The adoption of hydrogen-natural gas blends is creating additional technical requirements for fuel gas systems, particularly for managing changes in gas composition, pressure, temperature, and flow characteristics. Advancements in skid design, instrumentation, control systems, and gas-quality monitoring are therefore supporting the development of more flexible and application-specific fuel gas solutions for CCGT power plants.

Fuel Gas System Market Size & Forecast:

- Market Size Available for Years: 2023–2031

- 2025 Market Size: USD 1,350.0 Million

- 2031 Projected Market Size: USD 1,837.7 Million

- CAGR (2026–2031): 5.4%

Fuel Gas System Market Trends & Insights:

- Asia Pacific is expected to account for the largest share of the Fuel Gas System Market for combined-cycle power plants during the forecast period, with a CAGR of 5.8%, supported by industrial automation, electrification, and power infrastructure investments across the region.

- The above-600 MW segment is expected to register a CAGR of 5.9% during the forecast period, supported by the increasing development of large-capacity CCGT plants and the growing requirement for high-volume, reliable fuel-gas supply systems. Larger combined-cycle plants require fuel gas systems designed to accommodate higher gas flow rates and more demanding operating conditions, increasing the value and technical complexity of associated fuel gas conditioning packages

- Natural gas is expected to account for the largest share of the Fuel Gas System Market for combined-cycle power plants during the forecast period.

- Integrated-skid Suppliers is expected to account for the largest share of the Fuel Gas System Market for combined-cycle power plants.

- Industrial(Captive) is expected to register the highest CAGR during the forecast period.

Download PDF Brochure: https://www.marketsandmarkets.com/pdfdownloadNew.asp?id=248848313

Utilities are expected to account for the largest share of the Fuel Gas System Market by end user during the forecast period.

Utilities are expected to maintain their leading position, supported by their extensive involvement in large-scale electricity generation through combined-cycle power plants. Utility demand is supported by investments in new CCGT projects, expansion of gas-fired power generation capacity, and modernization of existing power-generation facilities. The growing need for flexible, reliable electricity generation is also encouraging utilities to expand and optimize their CCGT portfolios. In addition, integrating variable renewable generation into power systems is increasing the need for generation assets that can respond to changes in electricity demand and supply. Independent power producers also represent a significant source of demand through investments in utility-scale CCGT projects, particularly in markets with rising electricity consumption and growing requirements for reliable and dispatchable power generation.

Above 600 MW, by capacity, is expected to register the highest CAGR during 2026–2031.

Above 600 MW CCGT plant capacity is expected to register the highest growth rate during the forecast period, supported by the increasing development of large-scale electricity generation projects and the need to add substantial generation capacity through individual power plants. The segment is gaining traction as project developers and power producers increasingly consider higher-capacity CCGT configurations for utility-scale electricity generation. Furthermore, larger CCGT projects generally require more extensive fuel gas infrastructure and higher-value system packages, increasing demand for integrated fuel gas solutions. The growing adoption of advanced gas turbine technologies and the development of large-scale projects designed for long-term electricity supply are also supporting the segment's expansion. These factors are expected to sustain strong demand for fuel gas systems associated with CCGT plants above 600 MW through 2031.

North America is expected to be the fastest-growing region in the Fuel Gas System Market for combined-cycle power plants during the forecast period.

North America is expected to register the fastest growth during the forecast period, supported by strong investment in new combined-cycle power generation and increasing electricity demand across the region. The US accounts for most of this growth, driven by rising power needs from data centers, large manufacturing facilities, and other energy-intensive consumers, along with the replacement of aging generation assets. In addition, growing electricity demand in Texas and the Mid-Atlantic region is supporting greater utilization of natural-gas-based generation, while expansion of natural gas pipeline infrastructure is improving fuel availability for new and existing CCGT facilities. Canada and Mexico are also contributing to regional opportunities through investments in reliable gas-based generation and supporting infrastructure. These developments are expected to increase demand for fuel gas systems associated with new, expanded, and modernized CCGT power-generation and CHP facilities across North America.

Top Companies in Fuel Gas System Industry:

The Fuel Gas System Industry for combined-cycle power plants include KROHNE Group (Germany), Emerson Electric Co. (US), Gaumer Process (US), Multitex Group (India), GENERON (US), EML Manufacturing, LLC (Ireland), Sungov Engineering (India), Petrogas Gas Systems (Netherlands), Process Systems (France), Kilburn (India), ERGIL (Turkey), E&CO (South Korea), DAIPem Integrated Limited (India), Integrated Flow Solutions (US), and Delta Filters & Separators (India). These companies are strengthening their market positions through product portfolio expansion, technological development, capacity expansion, strategic partnerships, and geographic expansion.

Request Sample Pages: https://www.marketsandmarkets.com/requestsampleNew.asp?id=248848313

Fuel Gas System Market - Investment & funding + Merger & Acquisition

Investment Funding Context

The Fuel Gas System Market is attracting investment from fuel gas equipment manufacturers, system integrators, and gas-processing solution providers as spending on combined-cycle gas turbine (CCGT) power generation and associated gas infrastructure increases. Investments are increasingly directed toward integrated fuel gas conditioning skids, filtration and separation equipment, pressure regulation, metering, gas heating, and gas-quality monitoring solutions. Companies are also strengthening manufacturing and engineering capabilities to address growing demand for customized fuel gas packages and larger power-generation projects. In parallel, investments in LNG import terminals, gas transmission infrastructure, and gas-to-power projects are improving natural gas availability for CCGT generation and creating additional opportunities for fuel gas system suppliers. The emergence of hydrogen-capable gas turbines is also encouraging investment in technologies designed to accommodate blended fuels and changing gas compositions.

Revenue Shift Context

The Fuel Gas System Market is gradually shifting revenue toward applications associated with larger and more technically demanding CCGT power projects. While conventional natural gas-fired power generation still accounts for most market revenue, growing adoption of hydrogen-natural gas blending and hydrogen-capable gas turbines is creating new revenue opportunities for fuel gas system suppliers. Revenue is also shifting toward projects requiring higher levels of fuel-quality control due to variations in gas composition, pressure, and supply conditions. In addition, growing investments in CCGT projects across emerging power markets, particularly in Asia Pacific and the Middle East & Africa, are expanding the geographic sources of market revenue. The increasing emphasis on fuel flexibility and adaptation to evolving gas specifications is expected to further influence revenue patterns across the market.

Mergers and Acquisitions

M&A activity in the Fuel Gas System Market is primarily focused on strengthening capabilities in gas processing, fuel conditioning, measurement, and power-generation solutions. Recent transactions in adjacent gas-processing and power-generation technologies indicate increasing interest in assets that enhance natural gas treatment and fuel management capabilities. In March 2025, Emerson completed its USD 7.2 billion acquisition of the remaining stake in AspenTech, strengthening its industrial automation and software portfolio, although the transaction is broader than the fuel gas supply market.

Executive Summary

On 10 June 2026, BleepingComputer reported that Oracle PeopleSoft servers are allegedly being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations. PeopleSoft is an enterprise business software suite used by large organizations to manage HR, payroll, finance, supply chain, procurement, and student administration.

Key Takeaways

- Scale & Attribution: The attacks target both cloud and on-premises Oracle PeopleSoft instances, with ShinyHunters confirming they are behind the attacks and claiming to have stolen data from 300 instances across more than 100 organizations.

- Attack Method: ShinyHunters says they are using a “gadget chain” of old and zero-day vulnerabilities, though they note the attack does not work on all systems and believe exploitation success may depend on how an instance is configured.

- Primary Targets: Most of the organizations impacted are in the education sector, with many having been previously extorted by the threat actor.

- Known Victim: ShinyHunters confirmed Nottingham University as a victim, with its data already published on their leak site. The University released a statement acknowledging a cybersecurity incident.

-

Attack Mechanics: Exposed servers revealed a shell script designed to drop a ransom note on breached PeopleSoft servers. The script parses /etc/hosts to identify PeopleSoft-related systems, attempts SSH connections using common admin accounts such as psoft, oracle, and linuxadm, falls back to SSH key-based authentication if passwords fail, and then drops the ransom note into PeopleSoft web and application server directories.

Indicators of Compromise (IoCs)

IP Addresses (obfuscated):

- 142.11.200[.]186

- 142.11.200[.]187

- 142.11.200[.]188

- 142.11.200[.]189

- 142.11.200[.]190

- 108.174.202[.]99

- 176.120.22[.]24

Several of these IPs use a TLS certificate with the common name azurenetfiles[.]net, a domain previously linked to the ShinyHunters extortion gang.

File Path / Network Artifact:

A ransom note file named README-IF-YOU-SEE-THIS-YOUVE-BEEN-HACKED.TXT is dropped on internal PeopleSoft servers upon successful breach.

Mitigation Options

Organizations running Oracle PeopleSoft are advised to analyze logs for any connections from the above IP addresses. If these IoCs are found, immediately begin incident response, investigate whether the PeopleSoft instance was compromised, and consider temporarily removing affected servers from internet access until the environment can be secured and reviewed.

Executive Summary

On 19 June 2026, the threat group Icarus claimed to have compromised and exfiltrated data from customers of Klue, specifically the Salesforce integration of the market intelligence platform. Salesforce has since disabled Klue integrations.

Compromised Data Scope

The impacted data may consist of business names, products trialed/used, subscription details (units, pricing), business contact info (full names, work emails, job title, phone number, and business addresses), marketing/sales communications, and opportunity notes (free-form fields where teammates capture and track thoughts and next steps).

Key Takeaways

- With matching data points, there is high confidence that the Icarus actor is responsible for the Klue compromise and this supply chain attack.

- Security vendors including Recorded Future, Tanium, and Jamf have released statements on impact to their data. More statements are expected as others verify which data may have been touched or taken by the attackers.

- The Icarus actor states on their website that they have been active since April 28, 2026, and currently list two previous victims.

Attack Timeline

- 11 June: The Klue compromise began when anomalous behavior took place in a system connecting various integrations. Attackers pushed a code update capable of collecting OAuth tokens Klue customers use to connect Klue to their own systems.

- 12 June: Klue became aware of the anomalous behavior and noted unusual network connections to IP addresses the threat actor was using to remotely connect to the Klue backend servers and execute commands.

- 13 June: Klue staff disabled the remote access and removed the token-theft code from their servers, and issued a general alert to customers, which did not indicate which customers were impacted.

- 16 June: Emails began to appear in the inboxes of some targeted companies’ staff with the subject line “top secret email” and a warning: “Your data has been downloaded…You have 48 hours to communicate with us.”

- 19 June: Icarus listed Klue as one of their casualties on their leak site.

TTPs (MITRE ATT&CK)

- T1195 – Supply Chain Compromise: The threat actor leveraged a long-disused but still active credential originally created by Klue for a third-party integration prototype, then pivoted into Klue’s infrastructure to steal OAuth tokens and query customers’ CRM tools directly.

- T1528 – Steal Application Access Token: The attackers pushed a code update capable of collecting OAuth tokens Klue’s customers use to connect Klue to their own systems.

- T1078 – Valid Accounts: Huntress understands the threat actor leveraged a long-disused but still active credential to conduct the initial compromise.

- T1530 – Data from Cloud Storage: Some of the affected companies report that data associated with Salesforce and Gong were successfully exfiltrated. Huntress’ integration with Klue involved Salesforce and Gong data.

- T1657 – Financial Threats / Extortion: The actor advised Klue to contact them for “a swift resolution,” and separately advised affected companies to contact them via Session to protect their data.

- T1071 – Application Layer Protocol: Most malicious requests to Salesforce targeted /services/data/v59.0/query/ with a User-Agent of 5238 or blank, with some Python-based User-Agent strings used in nearly 900 queries.

Indicators of Compromise (IOCs)

Klue’s notification includes a non-exhaustive list of IP addresses from which the threat actor accessed sensitive information. The IPs belong to ISPs based in the Netherlands, France, and Ukraine:

- 138[.]226[.]246[.]94

- 212[.]86[.]125[.]24

- 213[.]111[.]148[.]90

- 94[.]154[.]32[.]160

Note: the 138[.]226[.]246[.]94 address is connected to spam campaigns from March 2026.

Extortion emails originated from domains belonging to subsidiaries of “Global Retail Brands,” an Australian retailer. Huntress believes the adversary leveraged their mail server as compromised infrastructure:

- house[.]com[.]au

- robinskitchen[.]com[.]au

- baccarat[.]com[.]au

The threat actor has historically provided samples of exfiltrated data on the dead-drop site gofile[.]io

Mitigation Options

- Review logs for known IOCs: Review the IOCs provided by Klue and cross-reference log data from Salesforce, Klue, and other potentially affected OAuth applications configured through Klue.

- Request missing logs from vendors: Some services may not have API/access logs readily available. Contact vendors to request missing logs, clarifying they are part of an active security investigation. Response times will vary depending on vendor SLAs.

- Revoke sessions for affected services: As this scenario was predicated on harvested credentials, revoking service integrations may be insufficient for remediation. Consider revoking all active sessions for known-affected services to invalidate any potentially compromised sessions.

- Review email inboxes and spam folders: The threat actor’s emails may have been delivered to Spam folders. Inboxes should be reviewed for communications related to the IOC domains or similar phrasing. If identified, retain them for forensic purposes.

- Engage cyber insurance provider: If cyber defenders find evidence of improper data exfiltration, engage cyber insurance provider to assist with investigation, remediation, and after-action items. These may vary significantly based on the scope of impact.

- Audit dormant credentials: The threat actor leveraged a long-disused but still active credential that was originally created by Klue for a third-party integration prototype they later abandoned. Audit and deactivate all dormant OAuth and third-party integration credentials.

Executive Summary

On 20 April 2026 Wiz Research uncovered a critical vulnerability (CVE-2026-3854) in GitHub’s internal git infrastructure affecting both GitHub.com and GitHub Enterprise Server. By exploiting an injection flaw in GitHub’s internal protocol, any authenticated user could execute arbitrary commands on GitHub’s backend servers with a single git push command – using nothing but a standard git client.

Affected Systems

GitHub Enterprise Server versions up to and including 3.19.1 are vulnerable. Fixed versions are: 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6, and 3.19.3. GitHub[.]com has been fully mitigated.

Technical Details

Root Cause: X-Stat Header Injection

The critical link between internal pipeline components is the X-Stat header, which carries security-critical fields as semicolon-delimited key=value pairs. Internal services parse this header by splitting on ; and populating a map using last-write-wins semantics: if a key appears twice, the later value silently overrides the earlier one.

The flaw: babeld copies git push option values directly into the X-Stat header without sanitizing semicolons. Since ; is the field delimiter, any semicolon in a push option value breaks out of its designated field and creates new, attacker-controlled fields.

RCE Exploitation Chain

The attack chains three injections together:

- Sandbox bypass – Inject a non-production rails_env value to switch from the sandboxed production path to the unsandboxed execution path.

- Hook directory redirect – Inject custom_hooks_dir to control the base directory where the binary looks up hook scripts.

- Path traversal to arbitrary execution – Inject repo_pre_receive_hooks with a crafted hook entry whose script field contains a path traversal sequence, resolving to an arbitrary binary on the filesystem.

Impact Scope

- On GitHub[.]com, this vulnerability allowed remote code execution on shared storage nodes, with millions of public and private repositories belonging to other users and organizations accessible on the affected nodes.

- On GitHub Enterprise Server, the same vulnerability grants full server compromise, including access to all hosted repositories and internal secrets.

Defensive Actions

For GitHub Enterprise Server administrators:

- GitHub released patches for all supported GHES versions. Customers should upgrade immediately; at the time of disclosure, 88% of instances remain vulnerable.

Fixed versions to target:

- 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6, and 3.19.3.

For GitHub[.]com users:

- GitHub has already mitigated this issue. No action is required.

For security and engineering teams broadly:

- The presence of non-production code paths in production binaries, lack of path traversal validation on hook scripts, and the use of delimiter-based protocols without input sanitization are patterns that appear across many codebases. Teams building multi-service architectures should audit how user-controlled input flows through internal protocols, notably where security-critical configuration is derived from shared data formats.

Executive Summary

In June 2026, D3 lab researchers reported on a new banking trojan. NFCShare is an Android banking trojan initially distributed as a malicious Android Package file (APK) through a phishing flow impersonating Deutsche Bank. The malware presents a fake card-verification interface, prompts the victim to place a payment card near the phone, collects the card PIN, and exfiltrates NFC-derived payment-card data to a WebSocket endpoint.

Since 14 May 2026, a newer wave of NFCShare APKs has been observed impersonating Italian and European banking brands, originating from a phishing website (areaclienti-intesa[.]com) mimicking Intesa Sanpaolo. The evolution is in campaign operations and analysis resistance: the actor is rotating brands, rebuilding APKs frequently, using URL shorteners, hosting payloads in a public GitHub repository disguised as a school project, and shipping APKs with malformed ZIP paths that can break automated extractors.

Key Takeaways

- The core NFC and exfiltration logic remains largely unchanged. The relevant evolution is operational and anti-analysis oriented: more frequent APK rebuilds, brand rotation, a new C2 endpoint, a 10-DEX layout, and malformed ZIP paths designed to break naive APK extractors.

- The GitHub repository used for hosting is named “app-scuola” (roughly “school app”), with a decoy README. As of 5 June 2026, the repository contains 57 commits starting 10 April 2026, with the vast majority using the commit message “Aggiornato tutto” (“Updated everything”).

- Victims may also receive an SMS or phone call from a fake bank operator who guides them through the process, including enabling Android installation from unknown sources in order to sideload the APK.

- The most important technical evolution is the packaging: newer APKs contain malformed ZIP entries such as paths rooted under /AndroidManifest.xml/, /classes.dex/, and /resources.arsc/. Simple extraction tools may try to write those entries as absolute paths, causing extraction failures.

- For defenders, the most resilient detection opportunities are not the APK filename or the C2 endpoint, but the internal NFCShare code markers, the WebView/NFC behavior combination, and the malformed APK structure introduced in the newer builds.

Indicators of Compromise (IOCs)

Network IOCs

File Hashes (SHA-256)

Application IOCs

TTPs (MITRE ATT&CK)

The malware retains key internal markers: the nfc.share.itnamteis namespace, CardInfoitmanteis model, MqttChannel enum, and NFC reader code using android[.]nfc[.]tech[.]IsoDep to send an EMV PPSE select APDU and parse returned payment card data.

Mitigation Options

D3 Labs included the following potential mitigations:

For End Users / Banks

- Block sideloading: Enforce policies preventing installation from unknown sources on corporate and BYOD devices.

- User awareness: Train customers to recognize that legitimate banks never request app updates via SMS links or phone calls.

- Warn users that attackers may use a social engineering layer via SMS or fake bank operator phone calls to guide victims through enabling unknown-source APK installation.

For Security Teams / Analysts

- Detection via code markers: Focus detection on internal NFCShare code markers (package name, namespace, MqttChannel enum), the WebView/NFC behavior combination, and malformed APK ZIP structure rather than filename or C2 endpoint alone.

- APK analysis tooling: Use the open-source tool apkInspector for APK parsing and artifact extraction, which is useful for identifying NFCShare family markers and DEX layout differences even in malformed samples.

- GitHub monitoring: Monitor for public repositories hosting bank-themed APK files with suspicious commit patterns.

- Treat failed APK extraction as a potential indicator rather than a benign signal, in this campaign, extraction failures are themselves useful indicators of the newer NFCShare packaging.

For Mobile Security / MDM

- Block NFC reader permissions for sideloaded or unverified applications.

- Implement behavioral detection for apps combining WebView UI with android[.]nfc[.]tech[.]IsoDep usage and WebSocket outbound connections.

- Block known malicious domains at the DNS/proxy layer.

Executive Summary

The retail and hospitality sectors operate on high-velocity human interaction, making their front lines a major target for sophisticated social engineering attacks.

Historically, organizations have relied on annual compliance videos and predictable phishing simulations to train frontline workers. While they were initially valuable, this type of traditional training no longer matches how attacks arrive or their increasing diversity and scale. The 2026 Verizon Data Breach Investigations Report reveals that ~62% of security breaches continue to involve the human element.

Countering automated, AI-driven campaigns takes more than traditional security compliance training programs. It takes human risk management (HRM): an approach that reduces human risk by changing how employees recognize and respond to an attack in real time, not once a year.

Key Takeaways

- Primary Threat Vector: Threat actors are shifting away from traditional malware delivery or infrastructure exploitation. They are increasingly engaging frontline employees directly, through conversation.

- Attack Methodology: Threat groups like Scattered Spider use open-source reconnaissance on sites like LinkedIn to map out organization charts. They then deploy AI voice cloning to pose as locked-out employees and talk help desk staff into resetting a password and enrolling multi-factor authentication (MFA) on a device they control.

- Sector-Specific Vulnerabilities: Frontline turnover is high enough that an annual training cycle can miss a seasonal or part-time worker’s entire tenure. A workforce rewarded for being fast and accommodating is exactly the opening a social engineer looks for.

- Cross-Channel Blind Spots: Frontline and floor staff work over SMS, radios, mobile apps, and collaboration tools, not just email. A security program built for the inbox alone cannot see the channels where these attacks actually land.

- Velocity of Compromise: Attackers optimize relentlessly and pivot the moment a channel hardens. Once a lure lands, compromise takes under a minute: Verizon’s 2024 DBIR measured a median of 21 seconds to click a phishing link and another 28 seconds to enter credentials. As email defenses caught up, attackers moved to the phone, where CrowdStrike’s 2025 Global Threat Report tracked a 442% surge in vishing.

Threat Actor Playbook: Conversational Social Engineering

Recent incidents show that modern adversaries do not need complex code or zero-day exploits to get past the perimeter. They target the person instead.

Threat groups like Scattered Spider are using generative AI to run multi-channel, conversational campaigns, following a repeatable loop built to get around technical controls, not break through them:

- Open-source reconnaissance: Attackers scrape professional networks to map the org chart, identifying the IT help desk staff and executives to target or impersonate.

- Vishing: Using AI voice cloning, they place high-pressure calls to the help desk, posing as locked-out employees.

- MFA and password reset abuse: They manufacture urgency to get help desk agents to reset the password and enroll MFA on a device they control, turning a support call into a direct foothold.

Sector-Specific Vulnerabilities and Operational Realities

Defending a consumer-facing brand means managing conditions that line up almost exactly with how attackers operate. Cybercriminals exploit three that are characteristic of retail and hospitality:

1. High workforce turnover

The frontline workforce turns over quickly, with much of it on seasonal and part-time contracts. Static, annual training cycles break down in this environment. By the time a seasonal or part-time employee is scheduled for their security awareness block, their contract may already be nearing its end.

2. Weaponization of customer service empathy

Frontline personnel, guest service agents, and business process outsourcing (BPO) representatives are rewarded for keeping customers happy. Social engineers play directly on that instinct.

By manufacturing a high-stress scenario, an angry high-value customer or a critical business delay, they pressure workers into breaking the verification protocols meant to catch exactly this.

3. Cross-channel blind spots

Unlike traditional corporate staff, floor managers and guest-facing employees rarely work from a desktop. Operations rely heavily on SMS, mobile apps, radios, and collaboration platforms. Standard email-only security controls cannot see these secondary channels, leaving blind spots where these attacks actually land.

Voice has become one of the loudest of those blind spots, with attackers increasingly using AI-cloned voices to call help desks and employees directly.

Transitioning to Human Risk Management

Mitigating these risks means shifting from passive, email-centric testing to human risk management. In practice, that changes a few things:

- Testing beyond the inbox: Resilience assessments extend past email to SMS, voice calls, and collaboration channels, the places frontline work actually happens.

- Threat-informed simulations: Generic templates give way to scenarios built from the campaigns actually targeting your sector, not last year’s lures.

- Point-of-failure coaching: Instead of an annual video, a worker who slips gets immediate feedback on the exact lure that fooled them, while it is still fresh.

Recommendations for Security Leaders

Building a more resilient human layer is a data-driven effort: track behavioral risk, model it, and act on it before it becomes an incident. Three moves matter most:

1. Test the help desk across every channel, and harden it

Put your help desk and contact center through realistic pressure, including AI voice calls paired with a follow-up text or email, and see whether agents hold the identity-verification line. Then close the gap the attack needs: require out-of-band or step-up verification before any password or MFA reset, so no single urgent call can hand over an account.

2. Coach at the moment of failure

For a high-turnover workforce, brief, contextual training beats the annual block. When someone slips on a simulation, immediate feedback, right then, helps them recognize the exact pressure used on them, without pulling them off the floor.

3. Score risk by role, and feed it real intelligence

A flat spreadsheet of risk ratings misses where the exposure actually sits. Combine behavioral signals, role and access, and live intelligence on the campaigns aimed at your sector to find the highest-exposure groups, then put your sharpest coaching and monitoring there first: the finance teams that move money, the help desk agents that hold the keys. This is where seeing the whole campaign matters.

The full social engineering attack chain begins with reconnaissance and impersonation long before a call reaches your help desk, and the work we do at Doppel is built on breaking that chain upstream of the inbox, rather than reacting one message at a time.