Qilin and Settra exploit PAN-OS CVE-2026-0257; ThreatsDay roundup of new RATs, stealers, WordPress backdoor and Meta GitHub breach
Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …