22/07/2026
🚨 Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin Ransomware
Threat actors are actively exploiting a critical authentication bypass flaw in Palo Alto Networks firewalls to breach corporate networks and deploy Qilin ransomware.
Affected versions include PAN-OS 12.1, 11.2, 11.1, and 10.2 (prior to specific patched builds), along with certain Prisma Access releases. Palo Alto Networks has confirmed limited active exploitation in the wild.
Attackers used compromised VPN sessions to gain direct, interactive access to victim networks, completely skipping perimeter authentication.
🔗 https://cybersecuritynews.com/cve-2026-0257-qilin-ransomware/
Arctic Wolf reveals threat actors exploiting Palo Alto PAN-OS flaw CVE-2026-0257 to deploy Qilin ransomware, bypassing VPN auth for domain-wide encryption.