🚨 Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access
Source: https://t.co/TpB3mJekdT
Ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access.
@ReliaQuestTR reports that multiple threat groups, including Qilin and Settra, are using the flaw to create unauthorized VPN sessions and enter internal networks through trusted remote access services.
The activity presents a serious detection challenge because attackers connect through an organization’s own VPN.
Their traffic can look like normal remote work, giving them time to steal credentials, move between systems, collect sensitive data, or prepare ransomware before security teams recognize the intrusion.
#cybersecuritynews
“We had to find a way and we did. Looking back, we were the luckiest people in the world; there was no choice but to be pioneers.” —Margaret Hamilton
Rest in peace, Margaret. Your trailblazing work leading the development of the on-board flight software for the Apollo spacecraft will forever be remembered. 🫡
How abliterated models can get you pwned 👾
We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts.
Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain.
In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
A 67-year-old woman was arrested in Vernon, Indiana, after allegedly doing doughnuts in her car on a courthouse lawn while under the influence, according to local news reports. https://t.co/0nGd6mt3dl