PAN-OS CVE-2026-0257: GlobalProtect bypass becomes a ransomware door

Unit 42 says Qilin and Inc affiliates are exploiting a May GlobalProtect bypass, in one case pivoting to vCenter and a domain controller's disk.

Unit 42 says Qilin and Inc affiliates are exploiting a May GlobalProtect bypass, in one case pivoting to vCenter and a domain controller's disk.