CVE-2026-0257: GlobalProtect VPN Flaw Hit by Ransomware

Ransomware operators don’t always need a zero-day — sometimes a five-month-old patch nobody applied is enough. That is exactly what is happening with CVE-2026-0257, a Palo Alto GlobalProtect VPN authentication bypass that Qilin and Settra are now using to walk into corporate networks through a trusted remote-access door.