Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…

SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen…

Ransomware gangs exploit CVE-2026-0257, a GlobalProtect authentication bypass in PAN-OS, to slip past MFA and open VPN sessions. Patch now. Related Posts: OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build AdFection Spyware Attack Targets Al Jazeera Devices GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps The post Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access appeared first on Daily CyberSecurity.

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.