Ransomware groups exploit PAN-OS CVE-2026-0257; active attacks reported

Palo Alto Unit 42 reports active exploitation of PAN-OS vulnerability CVE-2026-0257 by ransomware operators Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc). The update indicates ongoing attacks, but specific impact and patch availability are not detailed. This matters because PAN-OS is widely deployed in enterprise firewalls, and exploitation could lead to network compromise and data exfiltration.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works