[palo-alto]

August 25, 2026

• Five GlobalProtect findings disclosed publicly, ranging from local privilege escalation to recovery of Active Directory credentials from the endpoint agent. Reported to Palo Alto in early April; two were addressed under CVE-2026-0251 (globalunprotect.io). · Vulnerabilities & Exploits

in The Rogue Agent Staged an Apology, Then Pushed More Malware

July 4, 2026

• PAN-OS unauth root-RCE under limited exploitation. Palo Alto's advisory covers a critical PAN-OS flaw allowing unauthenticated arbitrary code execution with root privileges; the vendor has observed limited in-the-wild activity. CERT-EU 2026-006 · Vulnerabilities & Exploits

in Silent Active Directory Recon and a Near-Perfect Linux Root Exploit Lead the Offensive Beat

June 17, 2026

• Palo Alto PAN-OS GlobalProtect auth-bypass CVE-2026-0257 (CVSS 7.8) under active exploitation against portals/gateways by an unknown actor. The Hacker News. · Vulnerabilities & Exploits (Actively Exploited)

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists