Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

Ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access. ReliaQuest reports that multiple threat groups, including Qilin and Settra, are using the flaw to create unauthorized VPN sessions and enter internal networks through trusted remote access services. The activity presents a serious detection challenge because attackers […] The post Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access appeared first on Cyber Security News.

Excerpt shown under the publisher's RSS terms · 57 words · full text and figures are on the publisher's site