Infosecurity Magazine

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in ...
Hosted on MSN

Palo Alto Networks just confirmed active exploitation of an authentication bypass in its GlobalProtect VPN — unpatched boxes now getting hit across the internet

Federal agencies have until June 1, 2026, to patch a critical authentication bypass in Palo Alto Networks’ GlobalProtect VPN, and the clock started ticking on May 29. That is a three-day remediation ...
BleepingComputer

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf. Palo Alto Networks ...
CRN

Ingram Micro Attack Did Not Involve GlobalProtect VPN: Palo Alto Networks

The VPN was not ‘the source of the vulnerability or impacted’ in the ransomware attack against distribution giant Ingram Micro, Palo Alto Networks says. Reports connecting the GlobalProtect VPN system ...
BleepingComputer

New wave of VPN login attempts targets Palo Alto GlobalProtect portals

A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. The activity started on December 2nd ...
ad-hoc-news

Palo Alto Firewall: Why Enterprises Are Rethinking VPN And Zero Trust

Palo Alto Networks is quietly turning its firewalls into full security platforms with AI, Zero Trust, and faster cloud protection. But is it worth the premium vs Fortinet and Cisco? Here is what US ...
Dark Reading

Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution

Palo Alto Networks has published an advisory about its Palo Alto GlobalProtect SSL VPN solution which is used by many organizations. The advisory was a response to research carried out by Orange Tsai ...
Infosecurity-magazine.com

Palo Alto's GlobalProtect VPN Spoofed to Deliver New Malware Variant

Palo Alto Networks has observed that GlobalProtect, its virtual private network (VPN) software, was leveraged to deliver a new variant of the WikiLoader loader malware. In a report published on ...
techtarget

Palo Alto Networks discloses RCE zero-day vulnerability

A critical zero-day vulnerability in Palo Alto Networks' PAN-OS software is under active exploitation. Palo Alto Networks published a security advisory Friday detailing a command injection flaw, ...
Network World

Palo Alto adds VPN gateway, traffic shaping to firewalls

Palo Alto Networks is adding an SSL VPN gateway and traffic shaping to its firewalls, offering businesses another opportunity to reduce the number of devices they buy and maintain. While Palo Alto’s ...
CSOonline

Attackers bring their own passwords to Cisco and Palo Alto VPNs

Security researchers have flagged a coordinated credential-based campaign targeting VPN authentication endpoints from Cisco and Palo Alto Networks. Over just two days in mid-December, attackers ...