ServiceNow AI Platform RCE CVE-2026-6875 is under active exploitation days after the self-hosted patch release. Attackers are using a second sandbox escape route, so WAF rules are not enough. Patch now.

Qilin ransomware GlobalProtect VPN bypass attacks exploit Palo Alto CVE-2026-0257 to gain VPN access, steal credentials, move laterally, and encrypt domains. Patch PAN-OS, terminate sessions, and hunt for compromise now.