Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Ravie Lakshmanan reports Palo Alto Networks has disclosed that its continuing to observe exploitation of a nowpatched security flaw impacting PANOS and Prisma Access by ransomware actors The activity relates to CVE20260257 CVSS score 78 an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections It was patched