Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

AI Summary

Palo Alto Networks confirmed ongoing exploitation of CVE-2026-0257 (CVSS 7.8), an authentication bypass in PAN-OS and Prisma Access that allows attackers to establish unauthorized VPN connections and bypass MFA. Both the Qilin and INC ransomware groups have been observed exploiting this flaw, which was patched in May 2026 but continues to be targeted in active campaigns. Organizations running unpatched PAN-OS or Prisma Access should treat this as an immediate remediation priority.

Read full article → https://thehackernews.com/2026/10/qilin-and-inc-ra…

Relevance score: 86.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
2
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
5
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
6
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
8
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
10
ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop