> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#3 The Hacker News general July 21, 2026 at 14:04 UTC

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

By [email protected] (The Hacker News)

AI Summary

Arctic Wolf Labs confirmed that Qilin (aka Agenda) ransomware operators exploited CVE-2026-0257 (CVSS 7.8), a Palo Alto Networks PAN-OS authentication bypass affecting GlobalProtect portal and gateway, in multiple intrusions during June 2026. This is a significant escalation, as a high-severity VPN perimeter flaw is now being used as initial access for ransomware deployment at scale.

Read full article → https://thehackernews.com/2026/07/qilin-ransomware…

Relevance score: 89.0/100

# More from July 22

  1. 1
    Critical SharePoint RCE flaw exploited to steal machine keys BleepingComputer
  2. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  3. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  4. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  5. 6
    FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware BleepingComputer
  6. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  7. 8
    New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack The Hacker News
  8. 9
    Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes BleepingComputer
  9. 10
    HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 The Hacker News