Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

As cited

Copy frozen at 2026-10-20 19:25 UTC (site build).

ransomware

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Palo Alto Networks continues to observe active exploitation of CVE-2026-0257, a CVSS 7.8 authentication bypass flaw in PAN-OS and Prisma Access that allows attackers to establish unauthorized virtual private network (VPN) connections. Ransomware groups Qilin and INC have exploited the vulnerability despite patches released in May 2026.

Why it matters: Organizations running affected PAN-OS and Prisma Access versions face ongoing risk from ransomware actors bypassing multifactor authentication (MFA) to gain VPN access; verify patch deployment immediately if not already completed.

Source published

2026-10-20 15:32 UTC

First seen by Cybersecurity Tracker

2026-10-20 18:30 UTC