News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 21 Jul· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPN · Qilin ransomware exploits CVE-2026-0257 in Palo Alto firewall
-
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPN
The Qilin ransomware group is exploiting a critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS that allows attackers to bypass VPN authentication on GlobalProtect portals and gateways. This vulnerability was patched by Palo Alto on May 13,…
-
Qilin ransomware exploits CVE-2026-0257 in Palo Alto firewall
In June 2026, Arctic Wolf Labs identified multiple ransomware incidents linked to the Qilin ransomware, attributed to an exploitation of the CVE-2026-0257 vulnerability in Palo Alto Networks' GlobalProtect firewall. This authentication bypass allowed…
-
Thu 9 Jul· 2 articles
-
Palo Alto Networks Cloud NGFW2 articles this day · SecurityOnline first
Palo Alto Networks Patches 13 Vulnerabilities · Critical CVE‑2026‑0288 buffer overflow exposes Palo Alto firewalls
-
Palo Alto Networks Patches 13 Vulnerabilities
Palo Alto Networks has released advisories for over a dozen vulnerabilities in its products, including 13 specific to the firm and more than 500 patched flaws in Google’s Chromium. The most critical vulnerability, CVE-2026-0288, pertains to buffer overflows…
-
Critical CVE‑2026‑0288 buffer overflow exposes Palo Alto firewalls
Four active critical exploits were detected today, including vulnerabilities in JoomShaper SP Page Builder, Langflow, Joomlack Page Builder, and Adobe ColdFusion. A significant focus is on CVE-2026-0288, a buffer overflow vulnerability in Palo Alto Networks'…
-
Mon 15 Jun· 1 article
-
Attackers Leverage CVE-2026-0257 to Bypass GlobalProtect VPN Auth
Palo Alto Networks has issued a warning regarding an active exploitation of CVE-2026-0257, a vulnerability in PAN-OS that allows unauthorized users to bypass authentication and establish VPN connections. The flaw affects GlobalProtect portals and gateways…
Thu 11 Jun· 1 article
-
Palo Alto fixes Cortex flaw: Splunk patches Enterprise bug
On Wednesday, Splunk and Palo Alto Networks released patches addressing multiple vulnerabilities across their products, including critical and high-severity issues. Palo Alto identified a significant flaw in its Cortex platforms (CVE-2026-0274) that could…
Fri 5 Jun· 1 article
-
Attackers Exploit PANOS Flaw to Bypass GlobalProtect VPN
Palo Alto Networks' Unit 42 has reported active exploitation of a vulnerability in PAN-OS (CVE-2026-0257) by an unidentified actor targeting GlobalProtect. This vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN…
Mon 1 Jun· 7 articles
-
Palo Alto Networks PAN-OS7 articles this day · SecurityOnline first
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth · CVE-2026-0257 Cache Warmer RCE Bug Hits
-
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth
A critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect VPN allows attackers to bypass authentication and gain unauthorized access to VPNs. Disclosed in May 2026, the flaw has been actively exploited, prompting advisories from…
-
CVE-2026-0257 Cache Warmer RCE Bug Hits
A critical security vulnerability, tracked as CVE-2026-45247, has been identified in a Cache Warmer RCE flaw affecting Magento and Adobe Commerce platforms, rated with a severity of 9.8. This issue allows attackers to exploit the flaw by manipulating…
-
Palo Alto PANOS flaw exploited days after patch release
Threat actors are actively targeting a high-severity authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS just four days after its public disclosure. The vulnerability allows attackers to bypass VPN restrictions, and Palo Alto…
-
CISA flags PAN-OS flaw CVE-2026-0257 as attackers bypass VPN auth
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a significant vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0257, to its Known Exploited Vulnerabilities catalog with a CVSS score of 7.8. This vulnerability allows…
-
Attackers Exploit CVE-2026-0257 in Palo Alto GlobalProtect VPN
Palo Alto Networks has alerted customers to a high-severity authentication bypass vulnerability (CVE-2026-0257) affecting its GlobalProtect portal and gateway in the PAN-OS software. Despite a patch released on May 13, attackers are actively exploiting this…
-
Critical Langroid Vulnerability Allows RCE via Prompt Injection
A critical vulnerability (CVE-2026-0257) was discovered in the Langroid Python framework, which allows attackers to bypass input restrictions and perform remote code execution (RCE) via prompt injection. This flaw particularly affects the SQLChatAgent…
-
Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out
The article reports on a critical exploit detected today, specifically CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks' PAN-OS. Access to detailed information about this vulnerability requires support or contributions. The report…
-
Sun 31 May· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins · CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
-
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins
The article discusses CVE-2026-0257, a vulnerability in Palo Alto Networks' GlobalProtect VPN that allows attackers to forge authentication cookies and bypass login, confirmed to be exploited since May 17, 2026. Rapid7 reported that the flaw affects multiple…
-
CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
A critical vulnerability (CVE-2026-0257) has been identified in the MCP Toolbox, affecting its integration with enterprise database connectors. This flaw allows malicious websites to bypass security controls, exposing networks to session hijacking risks. The…
-
Sat 30 May· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation · Critical PANOS Flaw Lets Attackers Bypass Authentication
-
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
The article discusses an active exploitation of a vulnerability within PAN-OS, specifically a bypass in GlobalProtect authentication (CVE-2026-0257). This security flaw allows unauthorized access, posing significant risks to organizations utilizing the…
-
Critical PANOS Flaw Lets Attackers Bypass Authentication
The article discusses a critical security vulnerability in Palo Alto Networks' PAN-OS, identified as CVE-2026-0257, which allows authentication bypass and threatens enterprise perimeter networks globally. Threat actors are actively exploiting this flaw,…
-
Fri 29 May· 3 articles
-
Palo Alto Networks PAN-OS3 articles this day · CISA first
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw · Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
-
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw
CISA has added CVE‑2026‑0257 to its Known Exploited Vulnerabilities catalogue. The entry concerns Palo Alto Networks’ PAN‑OS software. The vulnerability, named “Palo Alto Networks PAN‑OS Authentication Bypass Vulnerability,” allows attackers to bypass…
-
Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
On May 13, 2026, Palo Alto Networks confirmed a medium severity authentication bypass vulnerability in PAN-OS (CVE-2026-0257). This flaw allows unauthenticated remote attackers to establish a VPN connection through the GlobalProtect gateway under specific…
-
CISA Adds Palo Alto PAN OS Auth Bypass CVE-2026-0257 to KEV List
On May 29, 2026, CISA added one new vulnerability, CVE-2026-0257, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability pertains to Palo Alto Networks' PAN-OS Authentication Bypass and represents a significant risk of active exploitation,…
-
Tue 19 May· 1 article
-
Critical flaw in Palo Alto firewalls lets attackers run root code
According to Siemens ProductCERT, a buffer overflow vulnerability in the User-ID Authentication Portal (Captive Portal) service of Palo Alto Networks PAN-OS software could allow an unauthenticated attacker to execute arbitrary code with root privileges on…
Thu 14 May· 2 articles
-
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
CVE-2026-0265 is an authentication bypass in Palo Alto Networks PAN-OS, with Palo Alto Networks publishing a security advisory on 13 May 2026. The flaw allows a remote unauthenticated attacker with network access to bypass authentication when Cloud…
-
Palo Alto fixes critical PAN OS bug after EarthWorm exploits
According to The Hacker News, Palo Alto Networks has released the first round of fixes for CVE-2026-0300, a critical PAN-OS flaw in the User-ID Authentication Portal that could let an unauthenticated attacker execute arbitrary code with root privileges; the…
Mon 11 May· 1 article
-
Ivanti EPMM and PAN OS flaws hit as patches roll out mid May
In the week ending 11 May 2026, The Hacker News recapped a mix of familiar attack patterns, including poisoned downloads, cloud misconfigurations and long‑standing bugged access paths, alongside newer methods like WebSocket backdoors and skimmers. The Threat…
Thu 7 May· 5 articles
-
Palo Alto Networks PAN-OS5 articles this day · unit42.paloaltonetworks.com first
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks · Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
-
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks
Nation-state actors have been exploiting the PAN-OS zero-day CVE-2026-0300 for weeks, gaining unauthenticated remote code execution and root access on exposed PAN-OS firewalls. According to Palo Alto Networks, after exploitation attackers used tunneling…
-
Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
SecurityWeek reports that Palo Alto Networks has disclosed exploitation of the recently disclosed zero-day affecting its PA and VM series firewalls, tracked as CVE-2026-0300, with unauthenticated remote code execution and root privileges. The firm said…
-
Palo Alto Networks Warns of Exploits in CVE-2026-0300 PANOS
Palo Alto Networks has disclosed that threat actors may have attempted to exploit a recently disclosed critical flaw as early as 9 April 2026. The vulnerability, CVE-2026-0300, is a buffer overflow in the PAN-OS User-ID Authentication Portal that could allow…
-
CISA adds Palo Alto PAN OS flaw CVE-2026-0300 to KEV catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog, tracked as CVE-2026-0300 with a CVSS score of 9.3. The issue is a buffer overflow that allows…
-
Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
The threat brief reports a buffer overflow in the User-ID Authentication Portal (Captive Portal) of PAN-OS, CVE-2026-0300, which allows an unauthenticated attacker to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls by sending…
-
Wed 6 May· 5 articles
-
Palo Alto Networks PAN-OS5 articles this day · SecurityWeek first
CVE-2026-0300 flaw in Palo Alto firewalls grants root access · Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)
-
CVE-2026-0300 flaw in Palo Alto firewalls grants root access
CISA has added CVE-2026-0300 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Palo Alto Networks PAN-OS, specifically the User‑ID Authentication Portal (Captive Portal) service on PA‑Series and VM‑Series firewalls. The vulnerability,…
-
Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)
On May 6, 2026, Palo Alto Networks published a security advisory for CVE-2026-0300, a critical unauthenticated buffer overflow in the PAN-OS User-ID Authentication Portal that affects PA-Series and VM-Series firewalls, with Prisma Access, Cloud NGFW, and…
-
Critical PAN-OS flaw CVE-2026-0300 under attack, patch due May
Palo Alto Networks has warned of a critical PAN-OS flaw, tracked as CVE-2026-0300, that is being actively exploited in the wild and carries a CVSS score of 9.3. The advisory describes a buffer overflow in the User-ID Authentication Portal (the Captive…
-
Critical PANOS flaw lets hackers run code via exposed portal
Palo Alto Networks has warned of a critical buffer overflow in PAN-OS’s User-ID Authentication Portal (captured as CVE-2026-0300) that enables unauthenticated remote code execution on PA-Series and VM-Series firewalls. The vulnerability carries a CVSS score…
-
Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
Palo Alto Networks is patching a critical PAN-OS zero-day, tracked as CVE-2026-0300, which has been exploited to hack some of the company’s firewall models. The vulnerability is described as a buffer overflow in the User-ID Authentication Portal (Captive…
-
Thu 9 Apr· 1 article
-
Palo Alto, SonicWall patch critical CVE-2026-0234 and other flaws
Palo Alto Networks and SonicWall have issued patches for multiple high-severity vulnerabilities across their products, with both vendors separately addressing concerns. The most critical flaw, CVE-2026-0234, affects Cortex XSOAR and Cortex XSIAM integrations…
No older articles match these filters.