News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 2 articles
-
Fortinet FortiWeb2 articles this day · SecurityOnline first
Hackers Target Exposed Fortinet and Palo Alto Firewalls in Global Campaign · Hackers Steal 70,000 Credentials in Fortinet and Palo Alto Attacks
-
Hackers Target Exposed Fortinet and Palo Alto Firewalls in Global Campaign
Cybersecurity researchers have detailed a large-scale campaign that targeted exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The joint investigation by Group-IB and NyxLab notes that operators in the…
-
Hackers Steal 70,000 Credentials in Fortinet and Palo Alto Attacks
Group-IB and NyxLab have uncovered a widespread campaign linked to an operator known as “k0t” that targets FortiGate, FortiWeb and Palo Alto GlobalProtect deployments. Launched largely between February and June 2026, the operation uses bulk asset discovery…
-
Tue 20 Oct· 3 articles
-
Palo Alto Networks PAN-OS3 articles this day · SecurityOnline first
Ransomware gangs exploit patched Palo Alto VPN security flaw · Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFA
-
Ransomware gangs exploit patched Palo Alto VPN security flaw
Palo Alto Networks has disclosed that exploitation of a vulnerability in PAN-OS and Prisma Access continues to be observed by ransomware actors, despite the flaw being patched earlier this year. The flaw, tracked as CVE-2026-0257, is an authentication bypass…
-
Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFA
Palo Alto Networks has disclosed that exploitation of a patched PAN-OS and Prisma Access flaw, CVE-2026-0257 (CVSS 7.8), is continuing in financially motivated campaigns. The vulnerability is an authentication bypass that could allow attackers to establish…
-
Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257
Ransomware groups are abusing CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to gain VPN access without valid credentials and to bypass MFA safeguards. The exposed flaw lets attackers skip login checks on vulnerable GlobalProtect portals and…
-
Fri 16 Oct· 1 article
-
China-linked hackers exploited BeyondTrust zero-day to steal credentials
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Thu 15 Oct· 4 articles
-
Palo Alto Networks Cloud NGFW3 articles this day · The Hacker News first
CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws · Palo Alto patches exploited PAN-OS zero-day allowing root access to firewalls
-
CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The list comprises CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519…
-
Palo Alto patches exploited PAN-OS zero-day allowing root access to firewalls
Palo Alto Networks has released patches for a PAN-OS zero-day vulnerability tracked as CVE-2026-0322, which has been exploited in limited attacks against the management interface of PAN-OS. The flaw allows remote code execution and can be exploited by an…
-
Palo Alto Patches PAN-OS Flaw Exploited to Run Code as Root
Palo Alto Networks has released security updates for PAN-OS after a high‑severity remote code execution flaw, tracked as CVE-2026-0322 (CVSS 8.6), was observed being exploited in the wild. The vulnerability affects PAN-OS running on PA‑Series and VM‑Series…
-
-
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access
Cisco and Palo Alto Networks have issued patches for two actively exploited zero-day vulnerabilities that can enable root-level code execution on security appliances. The flaws, CVE-2026-76519 and CVE-2026-0322, have been added to the US CISA Known Exploited…
Wed 14 Oct· 2 articles
-
Palo Alto Networks Cloud NGFW2 articles this day · SecurityOnline first
CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access · Palo Alto Patches PAN-OS Flaw Exploited to Gain Root Access
-
CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access
CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The vulnerability affects Palo Alto Networks PAN-OS and could let an authenticated attacker with network access execute arbitrary code as root on a firewall.…
-
Palo Alto Patches PAN-OS Flaw Exploited to Gain Root Access
Palo Alto Networks has disclosed CVE-2026-0322, a high-severity remote code execution flaw affecting PAN-OS managed devices, notably PA-Series, VM-Series and Panorama (virtual and M-Series). The vulnerability sits in the PAN-OS management interface and can…
-
Mon 12 Oct· 1 article
-
Ransomware gangs exploit Palo Alto VPN flaw months after patch release
Ransomware groups are continuing to target a high‑severity vulnerability in Palo Alto Networks products, CVE-2026-0257, despite a patch released five months ago. ReliaQuest warned on 9 October that multiple groups, including Qilin and Settra, are actively…
Mon 7 Sep· 1 article
-
SOCRadar Connects ChatGPT to Threat Intelligence via MCP
SOCRadar has released an integration that lets the SOCRadar Threat Intelligence MCP app connect ChatGPT to the SOCRadar MCP server via OAuth, exposing licensed intelligence modules as callable tools within a conversation. Analysts can enrich indicators,…
Tue 21 Jul· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPN · Qilin ransomware exploits CVE-2026-0257 in Palo Alto firewall
-
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPN
The Qilin ransomware group is exploiting a critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS that allows attackers to bypass VPN authentication on GlobalProtect portals and gateways. This vulnerability was patched by Palo Alto on May 13,…
-
Qilin ransomware exploits CVE-2026-0257 in Palo Alto firewall
In June 2026, Arctic Wolf Labs identified multiple ransomware incidents linked to the Qilin ransomware, attributed to an exploitation of the CVE-2026-0257 vulnerability in Palo Alto Networks' GlobalProtect firewall. This authentication bypass allowed…
-
Mon 15 Jun· 1 article
-
Attackers Leverage CVE-2026-0257 to Bypass GlobalProtect VPN Auth
Palo Alto Networks has issued a warning regarding an active exploitation of CVE-2026-0257, a vulnerability in PAN-OS that allows unauthorized users to bypass authentication and establish VPN connections. The flaw affects GlobalProtect portals and gateways…
Thu 11 Jun· 1 article
-
Palo Alto fixes Cortex flaw: Splunk patches Enterprise bug
On Wednesday, Splunk and Palo Alto Networks released patches addressing multiple vulnerabilities across their products, including critical and high-severity issues. Palo Alto identified a significant flaw in its Cortex platforms (CVE-2026-0274) that could…
Fri 5 Jun· 1 article
-
Attackers Exploit PANOS Flaw to Bypass GlobalProtect VPN
Palo Alto Networks' Unit 42 has reported active exploitation of a vulnerability in PAN-OS (CVE-2026-0257) by an unidentified actor targeting GlobalProtect. This vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN…
Mon 1 Jun· 7 articles
-
Palo Alto Networks PAN-OS7 articles this day · SecurityOnline first
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth · CVE-2026-0257 Cache Warmer RCE Bug Hits
-
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth
A critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect VPN allows attackers to bypass authentication and gain unauthorized access to VPNs. Disclosed in May 2026, the flaw has been actively exploited, prompting advisories from…
-
CVE-2026-0257 Cache Warmer RCE Bug Hits
A critical security vulnerability, tracked as CVE-2026-45247, has been identified in a Cache Warmer RCE flaw affecting Magento and Adobe Commerce platforms, rated with a severity of 9.8. This issue allows attackers to exploit the flaw by manipulating…
-
Palo Alto PANOS flaw exploited days after patch release
Threat actors are actively targeting a high-severity authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS just four days after its public disclosure. The vulnerability allows attackers to bypass VPN restrictions, and Palo Alto…
-
CISA flags PAN-OS flaw CVE-2026-0257 as attackers bypass VPN auth
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a significant vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0257, to its Known Exploited Vulnerabilities catalog with a CVSS score of 7.8. This vulnerability allows…
-
Attackers Exploit CVE-2026-0257 in Palo Alto GlobalProtect VPN
Palo Alto Networks has alerted customers to a high-severity authentication bypass vulnerability (CVE-2026-0257) affecting its GlobalProtect portal and gateway in the PAN-OS software. Despite a patch released on May 13, attackers are actively exploiting this…
-
Critical Langroid Vulnerability Allows RCE via Prompt Injection
A critical vulnerability (CVE-2026-0257) was discovered in the Langroid Python framework, which allows attackers to bypass input restrictions and perform remote code execution (RCE) via prompt injection. This flaw particularly affects the SQLChatAgent…
-
Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out
The article reports on a critical exploit detected today, specifically CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks' PAN-OS. Access to detailed information about this vulnerability requires support or contributions. The report…
-
Sun 31 May· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins · CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
-
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins
The article discusses CVE-2026-0257, a vulnerability in Palo Alto Networks' GlobalProtect VPN that allows attackers to forge authentication cookies and bypass login, confirmed to be exploited since May 17, 2026. Rapid7 reported that the flaw affects multiple…
-
CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
A critical vulnerability (CVE-2026-0257) has been identified in the MCP Toolbox, affecting its integration with enterprise database connectors. This flaw allows malicious websites to bypass security controls, exposing networks to session hijacking risks. The…
-
Sat 30 May· 2 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation · Critical PANOS Flaw Lets Attackers Bypass Authentication
-
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
The article discusses an active exploitation of a vulnerability within PAN-OS, specifically a bypass in GlobalProtect authentication (CVE-2026-0257). This security flaw allows unauthorized access, posing significant risks to organizations utilizing the…
-
Critical PANOS Flaw Lets Attackers Bypass Authentication
The article discusses a critical security vulnerability in Palo Alto Networks' PAN-OS, identified as CVE-2026-0257, which allows authentication bypass and threatens enterprise perimeter networks globally. Threat actors are actively exploiting this flaw,…
-
Fri 29 May· 3 articles
-
Palo Alto Networks PAN-OS3 articles this day · CISA first
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw · Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
-
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw
CISA has added CVE‑2026‑0257 to its Known Exploited Vulnerabilities catalogue. The entry concerns Palo Alto Networks’ PAN‑OS software. The vulnerability, named “Palo Alto Networks PAN‑OS Authentication Bypass Vulnerability,” allows attackers to bypass…
-
Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
On May 13, 2026, Palo Alto Networks confirmed a medium severity authentication bypass vulnerability in PAN-OS (CVE-2026-0257). This flaw allows unauthenticated remote attackers to establish a VPN connection through the GlobalProtect gateway under specific…
-
CISA Adds Palo Alto PAN OS Auth Bypass CVE-2026-0257 to KEV List
On May 29, 2026, CISA added one new vulnerability, CVE-2026-0257, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability pertains to Palo Alto Networks' PAN-OS Authentication Bypass and represents a significant risk of active exploitation,…
-
Tue 19 May· 1 article
-
Critical flaw in Palo Alto firewalls lets attackers run root code
According to Siemens ProductCERT, a buffer overflow vulnerability in the User-ID Authentication Portal (Captive Portal) service of Palo Alto Networks PAN-OS software could allow an unauthenticated attacker to execute arbitrary code with root privileges on…
Thu 14 May· 1 article
-
Palo Alto fixes critical PAN OS bug after EarthWorm exploits
According to The Hacker News, Palo Alto Networks has released the first round of fixes for CVE-2026-0300, a critical PAN-OS flaw in the User-ID Authentication Portal that could let an unauthenticated attacker execute arbitrary code with root privileges; the…
Mon 11 May· 1 article
-
Ivanti EPMM and PAN OS flaws hit as patches roll out mid May
In the week ending 11 May 2026, The Hacker News recapped a mix of familiar attack patterns, including poisoned downloads, cloud misconfigurations and long‑standing bugged access paths, alongside newer methods like WebSocket backdoors and skimmers. The Threat…
Thu 7 May· 5 articles
-
Palo Alto Networks PAN-OS4 articles this day · Security Affairs first
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks · Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
-
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks
Nation-state actors have been exploiting the PAN-OS zero-day CVE-2026-0300 for weeks, gaining unauthenticated remote code execution and root access on exposed PAN-OS firewalls. According to Palo Alto Networks, after exploitation attackers used tunneling…
-
Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
SecurityWeek reports that Palo Alto Networks has disclosed exploitation of the recently disclosed zero-day affecting its PA and VM series firewalls, tracked as CVE-2026-0300, with unauthenticated remote code execution and root privileges. The firm said…
-
Palo Alto Networks Warns of Exploits in CVE-2026-0300 PANOS
Palo Alto Networks has disclosed that threat actors may have attempted to exploit a recently disclosed critical flaw as early as 9 April 2026. The vulnerability, CVE-2026-0300, is a buffer overflow in the PAN-OS User-ID Authentication Portal that could allow…
-
CISA adds Palo Alto PAN OS flaw CVE-2026-0300 to KEV catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog, tracked as CVE-2026-0300 with a CVSS score of 9.3. The issue is a buffer overflow that allows…
-