CyberConfirmedMediumDeveloping

Qilin ransomware group leads global cyber activity with 24 claimed attacks for week of July 15-21, 2026

Global cyber activity reached 350 incidents across 58 countries, with the U.S. government and military sectors remaining the primary targets. Qilin emerged as the most active threat actor, contributing to a total of 29.6 TB of compromised data, though the attribution relies on self-reported claims by threat actors.

Hackmanac Cyber Newsabout 5 hours agoUSCredibility 46%View source

Score Breakdown

Mosaic Score10.0

Confidence0.7

Significance0.5

Source credibility0.5

Intelligence Tags

#cybersecurity #ransomware #qilin #data-breach #threat-intelligence

Entities

countryconcept

Source

Part of 2 situations

developingCyber37m ago

Qilin Ransomware Activity Escalates with PAN-OS Exploitation and Increased Attacks

The Qilin ransomware group has escalated its activity, leading global cyber incidents with 24 claimed attacks during the week of July 15-21, 2026. This surge is concurrent with confirmed exploitation of a critical authentication bypass vulnerability in Palo Alto Networks' GlobalProtect VPN, enabling unauthorized network access. The full scope of victim impact from this vulnerability exploitation remains unquantified.

↑ escalating·2 signals·USScore 7.8

activeJusticePolitics7m ago