Skip to content
Ferroscope
Menu
criticalNetworkpatchedCVSS 9.319 Oct 2026

Palo Alto edge

Ransomware gangs are breaking in through company firewalls

What happened

An authentication bypass in an internet-facing management interface is being used to deploy ransomware inside networks that believed the perimeter was safe.

Timeline

  1. 19 Oct 2026 · 06:00 UTC

    Advisory

    An authentication bypass is confirmed in the wild.
  2. 20 Oct 2026 · 11:00 UTC

    Ransomware

    Multiple intrusions escalate to encryption within 48 hours.
  3. 22 Oct 2026 · 09:00 UTC

    Hunt

    Organisations are told to audit management-plane logs.

Sources