As of May 9, 2026, the GlobalProtect ecosystem is facing a perfect storm: a widely exploited zero-day vulnerability in Palo Alto Networks firewalls that grants attackers root access, coupled with a ...
Threat actors target Middle Eastern organizations with malware disguised as the legitimate Palo Alto GlobalProtect Tool that can steal data and execute remote PowerShell commands to infiltrate ...
A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. The activity started on December 2nd ...