Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Source: The Hacker News Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation o Read original

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Source: The Hacker News Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation o Read original

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Source: The Hacker News Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation o Read original

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Source: The Hacker News Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation o Read original

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Source: The Hacker News Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation o Read original

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang Source: BleepingComputer The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims’ networks, according to cybersecurity company Arctic Wolf. […] Read original

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

SonicWall SMA1000 flaws exploited as zero-days to push custom malware Source: BleepingComputer Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. […] Read original

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

SonicWall SMA1000 flaws exploited as zero-days to push custom malware Source: BleepingComputer Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. […] Read original

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

Russian hackers trojanize WebEx, Zoom apps to push Starland malware Source: BleepingComputer A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland RAT. […] Read original

July 16, 2026 Updated: October 8, 2026 1 min

Google Gemini CLI abused as a hacking agent, malware botnet operator

Google Gemini CLI abused as a hacking agent, malware botnet operator Source: BleepingComputer A Russian-speaking threat actor known as “bandcampro” used Google’s open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. […] Read original