Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Palo Alto Networks disclosed continued exploitation of CVE-2026-0257 (CVSS 7.8), an authentication bypass flaw in PAN-OS and Prisma Access, by Qilin and INC ransomware groups. The flaw lets attackers set up unauthorized VPN connections. Palo Alto patched it in May 2026, yet ransomware actors keep exploiting it to bypass MFA and breach networks.