criticalNetworkpatchedCVSS 9.319 Oct 2026
Palo Alto edge
Ransomware gangs are breaking in through company firewalls
What happened
An authentication bypass in an internet-facing management interface is being used to deploy ransomware inside networks that believed the perimeter was safe.
Timeline
19 Oct 2026 · 06:00 UTC
Advisory
An authentication bypass is confirmed in the wild.20 Oct 2026 · 11:00 UTC
Ransomware
Multiple intrusions escalate to encryption within 48 hours.22 Oct 2026 · 09:00 UTC
Hunt
Organisations are told to audit management-plane logs.
Sources