Threat actor
Tarnished Scorpius
Tracked by CyberSIXT since 20 Oct
- Articles · all time
- 2
- Articles · last 30 days
- 2
- CVEs exploited · attributed
- 1
- Research reports · all time
- 0
Names and sources
- Tarnished Scorpius
- Named by CyberSIXT coverage
- tarnishedscorpius
- Named by CyberSIXT coverage
CVEs exploited
1 CVE an article attributes to Tarnished ScorpiusCVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerability · attributed by Unit 42, 20 Oct · Source articleCVSS7.8HighExploited95%EPSS0articles
Vendors targeted
- Ransomware gangs exploit patched Palo Alto VPN security flawDataBreaches
- Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257SecurityOnline · first in our coverage