Palo Alto Networks News Articles

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data theft and double extortion.

14 hours ago

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf.

18 hours ago

Palo Alto Warns of GlobalProtect VPN Vulnerability Actively Exploited in the Wild - IT Security News

Palo Alto Networks Unit 42 has issued an urgent warning about active exploitation of CVE-2026-0257, a critical authentication bypass vulnerability affecting the GlobalProtect portal and gateway components of PAN-OS software. The flaw allows unauthenticated remote attackers to circumvent security con...

GlobalProtect Authentication Bypass Exploited in 4 Days

CVE-2026-0257 GlobalProtect authentication bypass hit active exploitation four days after disclosure. Two attack waves tracked, CISA KEV listed. Act now.

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw - IT Security News

Palo Alto Networks has revealed that it has observed “active exploitation” of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication…Read more →

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto says CVE-2026-0257 is being exploited to bypass PAN-OS GlobalProtect authentication and create unauthorized VPN sessions.

CISA Warns of Active Exploitation of Palo Alto Networks PAN-OS Vulnerability - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert warning that threat actors are actively exploiting a critical vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0257. The flaw, categorized as an authentication bypass issue, allows…Read more →

Palo Alto warns of active exploitation of GlobalProtect authentication bypass flaw - IT Security News

Palo Alto Networks has alerted customers about the ongoing exploitation of the authentication bypass vulnerability in PAN-OS GlobalProtect. The vulnerability, tracked as CVE-2026-0257, lets unauthenticated actors bypass security measures and set up unsanctioned connections to vulnerable GlobalProtec...

Patch Now: Palo Alto Auth Bypass Bug Under Active Exploit

Exploiting the PAN-OS GlobalProtect VPN vulnerability requires certain conditions, but adversaries have done so in two attack waves that started mid-May.

Palo Alto VPN bug graduates from advisory to active exploitation

Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257) - IT Security News

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks’ firewalls that the company disclosed on May 13 have been targeted in “limited exploit attempts”. “Across multiple customers, Rapid7 observed successful exploitation via authentication probes using forged cookies, but the ap...

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257) - Help Net Security

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks' firewalls have been targeted in "limited exploit attempts".

Palo Alto Warns High-Severity Bug Is Being Actively Exploited

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

Recent Palo Alto Networks Vulnerability Exploited for Weeks

Hackers started exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS, four days after public disclosure.

IT Security News Weekly Summary 22 - IT Security News

210 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-05-31 19:5 : IT Security News Hourly Summary 2026-05-31 21h : 1 posts 18:36 : CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple…Read more →

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks

Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks.

Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild

Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities (KEV) catalog on May 29, 2026.

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

Ravie LakshmananMay 30, 2026Vulnerability / Network Security

Palo Alto PAN-OS Authentication Bypass Vulnerability Actively Exploited in the Wild - IT Security News

A critical authentication-bypass vulnerability affecting Palo Alto Networks PAN-OS and Prisma Access is being actively exploited by malicious actors. In response to mounting attacks, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0257 to its Known Exploited Vulnerabilitie...

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

CVE-2026-0257 is being actively exploited on PAN-OS devices since May 17, 2026, enabling unauthorized VPN access and network exposure.

Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild - IT Security News

Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities (KEV) catalog on May 29, 2026. Palo Alto Networks published its…Read more →

CISA Adds One Known Exploited Vulnerability to Catalog - IT Security News

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability This type of vulnerability is a frequent attack vectors for malicious cyber actors…Read mor...

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

CVE-2026-0300 exploited after April 9 attempts enables PAN-OS RCE, leading to stealth espionage and lateral movement by April 29.

Palo Alto Networks Firewall Zero-Day RCE Vulnerability Exploited in the Wild Since April - IT Security News

A critical zero-day vulnerability in Palo Alto Networks PAN-OS software has been actively exploited by a likely state-sponsored threat actor since at least April 2026, the company revealed in a security advisory published on May 6, 2026. Tracked as CVE-2026-0300,…Read more →

State-sponsored hackers likely behind zero-day attacks on Palo Alto firewalls - Help Net Security

Palo Alto Networks says attacks leveraging zero-day vulnerability (CVE-2026-0300) in its firewalls are likely state sponsored.