Threat actors are exploiting a high-severity vulnerability in Palo Alto Networks' GlobalProtect portal, enabling unauthorized access to internal networks.
The vulnerability or weakness
Not stated in the sources.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-0257 | 7.8 | HIGH | Yes, added 2026-05-29 | 2026-06-01 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
This could result in unauthorized access, data theft, and ransomware deployment, leading to operational disruptions and potential financial losses.
Industries affected
Education, financial services, healthcare, and other industries are at risk due to the wide-ranging targets of the ransomware groups.
Users affected
Organizations and their users face the risk of data breaches and ransomware attacks, potentially leading to loss of sensitive information and operational downtime.
Build these skills
Watch the daily brief
Sources
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA (The Hacker News)
- Ransomware groups expand targeting of Palo Alto Networks vulnerability (Cybersecurity Dive)
