Ransomware
Qilin and Inc Ransomware Chained PAN-OS Auth Bypass for Months
Unit 42 says Qilin and Inc have chained a PAN-OS GlobalProtect auth bypass into intrusions since June, pivoting to vCenter and dumping domain creds from VMDKs.
authentication bypass
CyberROI coverage tagged “authentication bypass”.
Vulnerabilities
BeyondTrust Remote Support zero-day exploited by Chinese spies
CVE-2026-102764 let ARMORY CASTLE root self-hosted BeyondTrust appliances, dump credential vaults and survive reboots. CISA's deadline is tomorrow.