Qilin and INC ransomware operators are exploiting CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks PAN-OS, to breach corporate networks through GlobalProtect VPN services.