2026-06-15: Palo Alto GlobalProtect VPN suffers active exploitation with CISA KEV deadline passed

Show Notes - 2026-06-15

Stories Covered

• Today: [June 15, 2026]
• Palo Alto PAN-OS GlobalProtect VPN Authentication Bypass (CVE-2026-0257) [Critical Alerts]
• Arch Linux Supply Chain Attack Hijacks 1,900+ AUR Packages [Critical Alerts]
• FBI Dismantles Chinese Phishing-as-a-Service Platform (Outsider Enterprise) [Business & Infrastructure Threats]
• WordPress Plugin Supply Chain Attack (Awesome Motive) [Business & Infrastructure Threats]
• Maine Attorney General Disables Data Breach Portal Due to Fake Submissions [Business & Infrastructure Threats]
• Sniper Dz Phishing-as-a-Service Platform Targets MENA Region [General Security News]
• Hotel Chain Data Breach (BWH Hotels) [General Security News]
• Novo Nordisk Clinical Trial Patient Data Breach [General Security News]
• ShinyHunters Lists New Victims [General Security News]
• CVE-2026-11526 (Perl GD Library Command Injection) [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-0257, CVE-2026-11526

Indicators of Compromise

IP Addresses: 23.128.228.6, 104.207.144.154, 146.19.216.119, 146.19.216.120, 146.19.216.125, 179.43.172.213, 185.195.232.139, 198.12.106.60, 202.144.192.47

Read the full brief