Ransomware gangs still use a patched Palo Alto bug to slip past VPN MFA

The Hacker News says the Qilin and INC ransomware groups keep breaking into company networks through CVE-2026-0257, a Palo Alto Networks flaw that already has a fix, and use it to get around MFA on VPN logins. In one intrusion they went on to VMware ESXi hosts and stole domain credentials.