Home/Digest/Transportation/Past issues
Transportation digest,
Transportation: Ransomware Groups Exploit PAN-OS Flaw, Target… (+1 more)
Ransomware
Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure
Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure on May 13, 2026, the vulnerability has been actively exploited, leading to unauthorized access to corporate networks across various sectors, including education, healthcare, and finance. Reports indicate that over 600 organizations have been affected by ransomware attacks linked to this vulnerability. Security experts recommend immediate patching and monitoring for signs of compromise, as attackers may have already established access before remediation. The situation is compounded by the rise of ransomware-as-a-service (RaaS) operations, which have increased the scale and impact of these attacks.
Ransomware · 20 sources · score 73 · CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711, CVE-2024-40766
Breaches
Cyberattack on VLCC Highlights Maritime Cybersecurity Risks
In August 2026, a very large crude carrier (VLCC) was reportedly targeted by a cyberattack while en route to Texas. The U.S. Coast Guard and FBI intervened, boarding the vessel to assess potential compromises to its operational technology and information systems. Iranian state media claimed that attackers accessed critical systems, including propulsion and cargo management, leading to a communications blackout. Another LNG carrier also experienced control system disruptions, reversing course after losing access to internal systems. The incidents underscore vulnerabilities in the Maritime Transportation System and coincide with the proposed MTS CYBER Act of 2026, which aims to enhance cybersecurity regulations in the maritime sector. No physical damage or operational disruptions were confirmed, but the incidents raised alarms about the potential for information warfare. Stakeholders are advised to evaluate their cybersecurity practices in light of increased scrutiny.
Disinfo & Influence · 2 sources · score 60
New on leak sites
6 victims listed on ransomware leak sites by 3 groups in the 7 days before this issue.
Get the next one by email
The transportation digest is free and arrives on Tuesdays. One click to leave.
Subscribe to the transportation digest
A free account turns the digest into a personal watchlist: choose what you want to follow.