Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)

vulnerability

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)

Palo Alto Unit 42 has observed active exploitation of PAN-OS vulnerability CVE-2026-0257 by ransomware operators, including Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc), and threat actors using Settra ransomware.…

Palo Alto Unit 42 · 18h ago CriticalCVSS 9.1KEVEPSS 97%

CVE-2026-0257 CVE-2023-27532 threat-intel vulnerability vpn

ransomware

Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death

German police arrested a Russian man, identified only as “Vladimir K,” linked to the Qilin ransomware gang.

Graham Cluley · 7h ago High

GE JA UK ransomware qilin synnovis

vulnerability

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Ransomware groups, including Qilin (Spikey Scorpius) and INC (Tarnished Scorpius), are exploiting a vulnerability in Palo Alto Networks' PAN-OS and Prisma Access to bypass multi-factor authentication and gain unauthorize…

The Hacker News · 1h ago CriticalCVSS 9.1KEVEPSS 97%

CVE-2026-0257 CVE-2023-27532 vulnerability ransomware vpn

news.mlab.sh

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)