VPN Flaw Lets Ransomware Crews Skip Login and MFA Entirely
A vulnerability in Palo Alto Networks' GlobalProtect VPN software is giving ransomware groups a way into corporate networks that sidesteps multi-factor authentication altogether. Unit 42, the