Hackers Actively Target Cisco and Palo Alto VPN Gateways to Steal Login Credentials

Gbhackers •Divya • December 18, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coordinated Brute-Force Attacks Target Cisco and Palo Alto VPN Gateways In mid-December 2025, threat actors executed a brute-force campaign against Cisco SSL VPN and Palo Alto Networks GlobalProtect portals, conducting millions of automated login attempts. The attacks were traced back to infrastructure operated by Germany’s 3xK GmbH, utilizing scripted credential stuffing techniques instead of zero-day exploits. 2 sources 42

Hackers Actively Target Cisco and Palo Alto VPN Gateways to Steal Login Credentials

The full story

Extracted Entities

Attack Types (1)

Companies (2)