ThreatCluster

Coordinated Brute-Force Attacks Target Cisco and Palo Alto VPN Gateways

First seen 18 Dec 2025, 03:51 UTC •CybersecuritynewsGbhackers •78% similarity •42

Article Content

Browse articles
ThreatCluster

In mid-December 2025, threat actors executed a brute-force campaign against Cisco SSL VPN and Palo Alto Networks GlobalProtect portals, conducting millions of automated login attempts. The attacks were traced back to infrastructure operated by Germany’s 3xK GmbH, utilizing scripted credential stuffing techniques instead of zero-day exploits.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Cisco Palo Alto Palo Alto Networks Cisco SSL VPN GlobalProtect