Palo Alto Networks News Articles

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials from VMware virtual disks.

1 week ago

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June - IT Security News

2026-10-21 13:10 Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in...

1 week ago

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June - Help Net Security

Several ransomware groups exploit CVE-2026-0257 in PAN-OS GlobalProtect to open VPN sessions and break into corporate networks.

1 week ago

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA - SwapUpdate

Ravie LakshmananOct 20, 2026Vulnerability / Network Security

1 week ago

IT Security News Daily Summary 2026-10-20 - IT Security News

200 posts published today 21:03Live Video Moderation Challenges Traditional Content Safety Systems 21:02PHP warns admins of two critical flaws, emergency patches coming tomorrow 21:02Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20) 21:02Ex-OpenAI Engineer Detained After...

1 week ago

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Unit 42 investigates network compromises across numerous industries

1 week ago

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Unit 42 investigates network compromises across numerous industries

1 week ago

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Qilin and INC ransomware actors continue exploiting a patched Palo Alto Networks flaw to gain network access, bypass MFA, and establish VPN sessions.

1 week ago

Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks

Ransomware operators are exploiting a Palo Alto Networks GlobalProtect VPN flaw to bypass multi-factor authentication and enter corporate networks.

1 week ago

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products - IT Security News

2026-10-15 13:10 The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a...

2 weeks ago

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation - SwapUpdate

Ravie LakshmananOct 15, 2026Vulnerability / Network Security

2 weeks ago

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks patched an exploited PAN-OS flaw that lets authenticated attackers with management interface access execute code as root.

2 weeks ago

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

Palo Alto Networks has patched CVE-2026-0322, a PAN-OS remote code execution zero-day exploited against customer firewalls.

2 weeks ago

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.

2 weeks ago

Qilin and Settra exploit patched Palo Alto VPN flaw

Ransomware operators Qilin and Settra are exploiting a five-month-old vulnerability in Palo Alto Networks remote-access software to penetrate corporate

3 weeks ago

Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May

3 weeks ago

Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

Ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access.

3 weeks ago

'Perimeter defences are prime targets': Security experts issue alert over Palo Alto GlobalProtect VPN exploitation

The flaw in Palo Alto Networks’ GlobalProtect VPN was recently upgraded from a ‘medium’ rating to ‘high’

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access - IT Security News

Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn that the Qilin ransomware gang is exploiting the critical PAN-OS GlobalProtect vulnerability CVE-2026-0257 to compromise corporate networks. CVE-2...

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data theft and double extortion.

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf.

Palo Alto Warns of GlobalProtect VPN Vulnerability Actively Exploited in the Wild - IT Security News

Palo Alto Networks Unit 42 has issued an urgent warning about active exploitation of CVE-2026-0257, a critical authentication bypass vulnerability affecting the GlobalProtect portal and gateway components of PAN-OS software. The flaw allows unauthenticated remote attackers to circumvent security con...

GlobalProtect Authentication Bypass Exploited in 4 Days

CVE-2026-0257 GlobalProtect authentication bypass hit active exploitation four days after disclosure. Two attack waves tracked, CISA KEV listed. Act now.

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw - IT Security News

Palo Alto Networks has revealed that it has observed “active exploitation” of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication…Read more →

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto says CVE-2026-0257 is being exploited to bypass PAN-OS GlobalProtect authentication and create unauthorized VPN sessions.