BloodHound

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 12, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

Ransomware groups exploit Palo Alto GlobalProtect flaw CVE-2026-0257

Unit 42 has investigated intrusions since early June; Qilin, Inc, and Settra are among the operators named.

Help Net Securityupdated 17:19 UTC · 3h agofirst Oct 21, 11:13 UTC · 4d agoExploit / PoCExploited19 sourcesCVE-2026-0257 CVE-2023-275322 · 1 read

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

Qilin and Settra are still exploiting Palo Alto CVE-2026-0257 to open unauthorized VPN sessions.

Infosecurity MagazineOct 12, 09:15 UTC · 13d agoExploit / PoCExploitedCVE-2026-02578 · 2 reads

Related CVEs

by mentions

CVE-2026-025797%7.8
Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
published May 13, 2026Palo Alto Networks PAN-OS (GlobalProtect portal and gateway)KEVRansomware
CVE-2023-2753281%7.5
Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials
published Mar 10, 2023Veeam Backup & ReplicationKEVRansomware

Appears with

PAN-OSproduct · 2
GlobalProtectproduct · 2
Palo Alto Networksvendor · 2
Settrathreat actor · 2
Cobalt Strikemalware · 2
Qilinthreat actor · 2
SharpHoundmalware · 2
Prisma Accessproduct · 2
Unit 42organization · 2
ReliaQuestorganization · 2
Rapid7organization · 2
Cloud NGFWproduct · 1
Incthreat actor · 1
Arctic Wolforganization · 1

Entities are extracted by the model from each article. First seen Oct 12, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.