1. Home
  2. Blog

Tech Blog

Field notes from real incidents: what broke, how we found it, and the fix. No fluff.

Ransomware Gangs Are Using GlobalProtect CVE-2026-0257: What to Check

Unit 42 says Qilin and Inc ransomware are exploiting GlobalProtect auth bypass CVE-2026-0257 to get VPN access. The fix, the config change and what to hunt for.

PAN-OS October 2026: CVE-2026-0322 Management RCE and a GlobalProtect Identity Bug

Palo Alto's October advisories: CVE-2026-0322 gives root on the firewall via the management interface and is already attacked, plus GlobalProtect CVE-2026-0319.