GreyNoise is tracking a coordinated, automated credential-based campaign targeting enterprise VPN authentication infrastructure, with activity observed against Cisco SSL VPN and Palo Alto Networks GlobalProtect services.
Coordinated Credential-Based Campaign Targets Cisco and Palo Alto Networks VPN Gateways
calendar_today
December 17, 2025
domain
greynoise