Palo Alto Networks Flaw Exploited by Ransomware Actors
Palo Alto Networks has reported ongoing exploitation of a previously patched security flaw affecting PAN-OS and Prisma Access by ransomware groups Qilin and INC.
Background on CVE-2026-0257
- CVE-2026-0257 is an authentication bypass vulnerability
- Impacted systems include PAN-OS and Prisma Access
- Security flaw was patched by Palo Alto Networks in May 2026
- CVSS score: 7.8
Ransomware Actors' Exploitation
The flaw, CVE-2026-0257, allows ransomware groups Qilin and INC to bypass Multi-Factor Authentication (MFA) and establish unauthorized VPN connections.
Palo Alto Networks has cautioned that the flaw was patched in May 2026, yet the exploitation continues.
Qilin and INC Ransomware Groups
Qilin and INC are known to have used the vulnerability to launch attacks, causing financial losses and data breaches.
Organizations affected by these groups' exploits are urged to review their security measures and ensure they have implemented the necessary patches to protect against similar threats.
</body> </html><small>Source: The Hacker News — read the original story there.</small>
