July 22, 2026
- Qilin (Agenda) ransomware is exploiting Palo Alto PAN-OS auth bypass CVE-2026-0257 (CVSS 7.8) for initial access. Arctic Wolf investigated multiple June intrusions through the GlobalProtect portal/gateway flaw, followed by credential theft, lateral movement, and distinctive persistence before ransomware deployment. The Hacker News, Arctic Wolf. · Threat Activity
in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face