Tag: inc

Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA Controls

Ransomware groups like Spikey Scorpius (Qilin) and Tarnished Scorpius (INC) are exploiting a Palo Alto Networks flaw, CVE-2026-0257, to bypass multi-factor authentication controls and create unauthorized VPN sessions. This vulnerability, patched in May 2026, has been added to the US government's list of known exploited vulnerabilities.