Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

As cited

Copy frozen at 2026-10-12 13:19 UTC (site build).

ransomware

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

ReliaQuest identified Qilin and Settra ransomware groups actively exploiting a Palo Alto virtual private network (VPN) vulnerability that received a patch in May. The flaw, unpatched in production environments months after remediation became available, continues to serve as an entry point for threat actors seeking network access.

Why it matters: Organizations running unpatched Palo Alto VPN appliances face immediate compromise risk from known ransomware operators; patching this flaw should take priority if not already completed.

Source published

2026-10-12 09:15 UTC

First seen by Cybersecurity Tracker

2026-10-12 12:32 UTC