Palo Alto Networks

Multiple ransomware groups, including Qilin, Inc and Settra, have been exploiting a high-severity authentication bypass in Palo Alto Networks' PAN-OS firewall software for months, the vendor's incident response unit says, gaining initial access to corporate networks, bypassing multi-factor authentication and, in some cases, moving directly into the virtualisation layer to disable security controls.