vulnerability
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
CriticalCVSS 9.8KEVEPSS 97%
Summary
A threat actor known as k0t has been identified as targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, resulting in the compromise of over 70,000 credentials. The actor is linked to ransomware groups like Qilin and The Gentlemen, and has a broad geographic scope, with a significant concentration of victims in the Asia Pacific region.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 5 other source(s)
- Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
- Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
- Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
- Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619