Reports mentioning Palo Alto Networks
China-aligned threat actors are actively exploiting a critical vulnerability, identified as CVE-2026-51990, within Tencent's Sogou Input Method for Windows. This exploit allows the adversaries to deploy the GrayRabbit backdoor, a piece of malware associated with espionage activities.
Threat actors are actively exploiting the banners of File Transfer Protocol (FTP) servers to conceal malicious commands, enabling the delivery of two previously undocumented remote access trojans (RATs) to Windows systems.
Palo Alto Networks and NTT DATA announced a multiyear global alliance on Thursday, aiming to generate $1 billion in joint business by the end of 2029. This partnership combines Palo Alto Networks' security platforms with NTT DATA's consulting and managed…
Malware operating with standard user privileges on a Windows system can now gain unauthorized access to passkey-protected accounts, bypassing essential security measures such as fingerprint scans or PIN entry. This vulnerability allows attackers to sign into accounts without any visible…
Palo Alto Networks' Unit 42 reported on March 13, 2024, that a Chinese-speaking threat actor, identified by the aliases knaithe and KnYuan, utilized the large language model DeepSeek to launch autonomous cyberattacks.
Sakana AI released Fugu-Cyber (model ID fugu-cyber-v1.0) this week, an addition to its Fugu orchestration family specifically tuned for cybersecurity reasoning. This model represents a third endpoint on the Fugu orchestrator, which Sakana launched approximately one month prior.
A sophisticated cyber operation named 'FakeGit' has been identified, leveraging approximately 7,600 compromised GitHub repositories to distribute malicious software. These repositories have collectively amassed over 14 million downloads, indicating a significant reach and potential impact.
Qilin ransomware attackers have been observed exploiting a high-severity Palo Alto Networks PAN-OS vulnerability, identified as CVE-2026-0257, to gain initial access into victim environments. Arctic Wolf Labs reported investigating multiple intrusions in June 2026 that commenced with the exploitation…
The Qilin ransomware gang is actively exploiting a critical authentication bypass vulnerability in Palo Alto Networks' PAN-OS GlobalProtect software. Cybersecurity firm Arctic Wolf reported this exploitation, noting that the gang is using the flaw to gain unauthorized access to victim…
Cybersecurity researchers have identified a novel ransomware technique that leverages AI-generated code to exploit the Chromium API on both Windows and Android devices. This malware, created using the DeepSeek AI model, effectively transforms a web browser into a ransomware delivery…
Cybercriminals are leveraging the tendency of large language models (LLMs) to "hallucinate" non-existent web addresses to conduct sophisticated phishing and malware attacks. This emerging threat, termed "phantom squatting" by Palo Alto Networks' Unit 42, involves attackers registering these AI-invented domains…
Palo Alto Networks confirmed on March 18, 2026, that an unknown threat actor is actively exploiting a critical vulnerability in its PAN-OS software. The vulnerability, identified as CVE-2026-0257 with a CVSS score of 7.8, allows for authentication bypass on GlobalProtect…