Qilin and Settra exploit patched Palo Alto VPN flaw

Ransomware operators Qilin and Settra are exploiting a five-month-old vulnerability in Palo Alto Networks’ remote-access software to penetrate corporate networks, cybersecurity company ReliaQuest warned on 9 October. The activity targets CVE-2026-0257, an authentication bypass flaw affecting certain configurations of GlobalProtect, the virtual private network service used by organisations to give