Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
MentionsPalo Alto NetworksPAN-OSQilin
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42 .
Summary from Palo Alto Unit 42.
Explained
The technology and terms in this story. Learn more
- AttackRansomwareMalware that encrypts an organisation's systems and demands payment, often after stealing data to leak.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
Related coverage
Other sources covering the same vulnerabilities or event.