Security · Updated 20 Oct, 09:02 pm IST
Ransomware groups exploit Palo Alto flaw to bypass MFA, firm says
Why it matters for readers: It demonstrates how attackers target network authentication flaws to get into systems despite MFA.
- Palo Alto Networks reported ongoing exploitation of a patched authentication bypass (CVE-2026-0257) in PAN-OS and Prisma Access.1
- The vulnerability has a CVSS score of 7.8 and can be abused to establish unauthorized VPN connections that bypass MFA.1
- Ransomware groups identified as Qilin and INC have been observed exploiting the flaw.1
- Palo Alto Networks issued a patch for the flaw in May 2026.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started