Malware & Ransomware
Qilin and Settra Ransomware Groups Exploit Palo Alto VPN Flaw
ReliaQuest confirms ransomware operators are actively abusing a high-severity authentication bypass in Palo Alto Networks products to gain initial access.
Palo Alto Networks
Everything Threat Times has reported about Palo Alto Networks: 7 stories, newest first. Part of our Cyber Attacks coverage.
Cloud Security
Researchers highlight persistent AWS AgentCore security flaws in default configurations
Palo Alto Networks and Zenity Labs report that AWS AgentCore default settings allow credential exfiltration via prompt injection, illustrating broader AI agent risks.
Threat Intelligence
Palo Alto Unit 42 Links Blinder Tunnel Campaign to Iranian Actor Targeting Iraqi Critical Infrastructure
Researchers identify a state-aligned Iranian group using fake recruitment portals and custom malware to compromise aviation and telecom sectors in the Middle East.
Tech News
Palo Alto Networks Report Finds Legacy OT Systems Undermine Critical Infrastructure Cyber Resilience
A 2026 report by Palo Alto Networks reveals that legacy operational technology systems and fragmented security tools significantly weaken the cyber posture of critical infrastructure organizations.
Vulnerabilities
Ransomware Groups Exploit Palo Alto GlobalProtect Auth Bypass CVE-2026-0257
Threat actors including Qilin and Settra are abusing a Palo Alto Networks authentication bypass to create stealthy, unauthorized VPN sessions.
Cyber Attacks
Unit 42 Reveals Blinder Tunnel Campaign Targets Iraqi Critical Infrastructure
Palo Alto Networks researchers identify an Iran-nexus operation using fake Dubai Airport recruitment lures and GitHub-based command and control infrastructure to compromise systems.
Cyber Attacks
Palo Alto Unit 42 Reports Web3 Infrastructure Used in Cloud Supply Chain Attacks
Researchers detail how threat actors exploit Web3 tools and open-source components to breach enterprise cloud environments.