The Hacker News

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Attackers exploit PAN-OS CVE-2026-0257 to deploy Qilin ransomware, with intrusions ranging from rapid encryption to data ...

Alerte sur les VPN Palo Alto, des hackers exploitent une faille pour déployer le ransomware Qilin

Déjà exploitée pour établir des connexions VPN frauduleuses, la faille CVE-2026-0257 sert désormais de point de départ à des ...
Computing

Qilin ransomware exploits critical Palo Alto VPN flaw to breach corporate networks

Qilin ransomware gang is actively exploiting a critical vulnerability in Palo Alto Networks' GlobalProtect VPN software to ...
CSO Online

Ransomware groups are hammering your vulnerable VPNs

Campaigns against flaws in security systems from Palo Alto, Fortinet, Citrix, and Check Point underscore a rising trend in ...
Hosted on MSN

Palo Alto Networks just confirmed active exploitation of an authentication bypass in its GlobalProtect VPN — unpatched boxes now getting hit across the internet

Federal agencies have until June 1, 2026, to patch a critical authentication bypass in Palo Alto Networks’ GlobalProtect VPN, and the clock started ticking on May 29. That is a three-day remediation ...
ZDNet

VPN users: If you're on Fortinet, Palo Alto, Pulse Secure, patch now, warns spy agency

If your employees are using virtual private networks (VPNs) from Fortinet, Palo Alto, or Pulse Secure, you really need to patch the products and search through system logs for signs of compromise. As ...
Mena FN

Palo Alto VPN Flaw Draws Urgent Patching Arabian Post

(MENAFN- The Arabian Post) clearfix"> Cybersecurity teams are racing to patch a Palo Alto Networks authentication-bypass flaw after confirmed exploitation against exposed GlobalProtect deployments ...
Bleeping Computer

New NachoVPN attack uses rogue VPN servers to install malicious updates

A set of vulnerabilities dubbed "NachoVPN" allows rogue VPN servers to install malicious updates when unpatched Palo Alto and SonicWall SSL-VPN clients connect to them. AmberWolf security researchers ...
Bleeping Computer

New wave of VPN login attempts targets Palo Alto GlobalProtect portals

A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. The activity started on December 2nd ...