Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang

**Qilin ransomware group is actively exploiting a critical authentication-bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect to gain unauthenticated access and deploy cross-platform ransomware (including ESXi targeting and double-extortion).** The report, citing Arctic Wolf confirmation of in-the-wild exploitation, outlines the vulnerability details, attack chain, detection signals, and urgent mitigations such as immediate patching, log review for indicators of compromise, restricting management interfaces, and enabling threat prevention.