ThreatVectr
Tag

#globalprotect

4 stories taggedglobalprotect.

Illustration: a dim data centre aisle
Vulnerabilities

Ransomware crews are still breaking into Palo Alto firewalls through a patched VPN flaw

Palo Alto Networks says Qilin, Inc and Settra operators keep probing CVE-2026-0257 months after the May patch, with CISA holding federal agencies to a June 1 fix deadline.

3 min read
Illustration: a rack-mounted enterprise network firewall appliance glowing with amber status LEDs in a dim server room
Vulnerabilities

PAN-OS VPN Flaw Is Being Exploited Right Now

Palo Alto Networks confirms hackers are abusing a login bypass in its GlobalProtect VPN. A small number of attempts have succeeded.

3 min read
Illustration: a dimly lit server room with a rack-mounted enterprise firewall appliance glowing red on its status LEDs
Ransomware

Qilin ransomware crew is breaking into Palo Alto VPNs through an unpatched flaw

Arctic Wolf says multiple Qilin affiliates are exploiting CVE-2026-0257 in Palo Alto Networks firewalls to encrypt whole networks. Over 167,000 VPN instances remain exposed online.

3 min read
Illustration: a darkened data center aisle with a single network firewall appliance illuminated by a red status LED
Vulnerabilities

Palo Alto GlobalProtect Auth Bypass Hits Live Exploitation

CVE-2026-0257 lets attackers stand up unauthorized VPN sessions against PAN-OS and Prisma Access. Patches are out. So are the exploits.

3 min read
© 2026 Threat Vectr