Palo Alto Networks News Articles

CISA Warns of Active Exploitation of Palo Alto Networks PAN-OS Vulnerability - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert warning that threat actors are actively exploiting a critical vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0257. The flaw, categorized as an authentication bypass issue, allows…Read more →

1 week ago

Palo Alto warns of active exploitation of GlobalProtect authentication bypass flaw - IT Security News

Palo Alto Networks has alerted customers about the ongoing exploitation of the authentication bypass vulnerability in PAN-OS GlobalProtect. The vulnerability, tracked as CVE-2026-0257, lets unauthenticated actors bypass security measures and set up unsanctioned connections to vulnerable GlobalProtec...

1 week ago

Patch Now: Palo Alto Auth Bypass Bug Under Active Exploit

Exploiting the PAN-OS GlobalProtect VPN vulnerability requires certain conditions, but adversaries have done so in two attack waves that started mid-May.

1 week ago

Palo Alto VPN bug graduates from advisory to active exploitation

Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

1 week ago

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257) - IT Security News

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks’ firewalls that the company disclosed on May 13 have been targeted in “limited exploit attempts”. “Across multiple customers, Rapid7 observed successful exploitation via authentication probes using forged cookies, but the ap...

1 week ago

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257) - Help Net Security

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks' firewalls have been targeted in "limited exploit attempts".

1 week ago

Palo Alto Warns High-Severity Bug Is Being Actively Exploited

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

1 week ago

Recent Palo Alto Networks Vulnerability Exploited for Weeks

Hackers started exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS, four days after public disclosure.

1 week ago

IT Security News Weekly Summary 22 - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-05-31 19:5 : IT Security News Hourly Summary 2026-05-31 21h : 1 posts 18:36 : CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple…Read more →

1 week ago

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks

Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks.

2 weeks ago

Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild

Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities (KEV) catalog on May 29, 2026.

2 weeks ago

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

Ravie LakshmananMay 30, 2026Vulnerability / Network Security

2 weeks ago

Palo Alto PAN-OS Authentication Bypass Vulnerability Actively Exploited in the Wild - IT Security News

A critical authentication-bypass vulnerability affecting Palo Alto Networks PAN-OS and Prisma Access is being actively exploited by malicious actors. In response to mounting attacks, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0257 to its Known Exploited Vulnerabilitie...

2 weeks ago

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

CVE-2026-0257 is being actively exploited on PAN-OS devices since May 17, 2026, enabling unauthorized VPN access and network exposure.

2 weeks ago

Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild - IT Security News

Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities (KEV) catalog on May 29, 2026. Palo Alto Networks published its…Read more →

2 weeks ago

CISA Adds One Known Exploited Vulnerability to Catalog - IT Security News

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability This type of vulnerability is a frequent attack vectors for malicious cyber actors…Read mor...

2 weeks ago

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

CVE-2026-0300 exploited after April 9 attempts enables PAN-OS RCE, leading to stealth espionage and lateral movement by April 29.

Palo Alto Networks Firewall Zero-Day RCE Vulnerability Exploited in the Wild Since April - IT Security News

A critical zero-day vulnerability in Palo Alto Networks PAN-OS software has been actively exploited by a likely state-sponsored threat actor since at least April 2026, the company revealed in a security advisory published on May 6, 2026. Tracked as CVE-2026-0300,…Read more →

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls - Help Net Security

Palo Alto Networks says attacks leveraging zero-day vulnerability (CVE-2026-0300) in its firewalls are likely state sponsored.

Palo Alto Networks firewall zero-day exploited for nearly a month

Palo Alto Networks warned customers that suspected state-sponsored hackers have been exploiting a critical-severity PAN-OS firewall zero-day vulnerability for nearly a month.

U.S. CISA adds a flaw in Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities catalog - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Palo Alto Networks PAN-OS, tracked as CVE-2026-0300…Read more ...

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking

Palo Alto Networks has shared information on the exploitation of the recent zero-day vulnerability affecting some of its firewalls.

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls

Palo Alto Networks is working on patches for a critical PAN-OS zero-day that has been exploited to hack some of the company’s firewall models.

Palo Alto Networks Firewall Zero-Day Exploited in Active Attacks  | eSecurity Planet

Palo Alto Networks disclosed a critical PAN-OS firewall vulnerability that is being actively exploited.

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

CVE-2026-0300 exploited via public PAN-OS portal before May 13, 2026 patch, enabling root RCE on firewalls.