
Palo Alto Networks patches a PAN-OS zero-day that attackers are using to run code as root on firewalls
CVE-2026-0322 affects the management interface. CISA has given federal agencies until October 17 to fix it.
Thursday, October 15, 2026

Iowa, Kansas, Nebraska, West Virginia, Arkansas, Arizona, Idaho and Montana filed coordinated but separate lawsuits on Wednesday.

CVE-2026-0322 affects the management interface. CISA has given federal agencies until October 17 to fix it.

Officials say the 20-year-old suspect's site sold credentials and personal data through more than 1,500 seller accounts.

ThreatFabric says the malware combines credential theft with live remote control of the infected phone.

Haydn Belfield says the share of code changes handed fully to AI rose from 7.5 to 11.9 percent, and every change still gets human review.

The company says the model, built on GLM-5.3 Flash, costs $0.13 per task on its internal suite and beats Claude Fable 5.

According to The Information, the flagship uses the same looped transformer technique as Astra, which makes safety monitoring harder.

Revenue rose about 45 percent from the second quarter, well below the more than 140 percent jump the quarter before.