THREATOPS
THREAT OPSThreat News › Coordinated Credential-Based Campaign Targets Cisco and Palo Alto Networks VPN Gateways

Coordinated Credential-Based Campaign Targets Cisco and Palo Alto Networks VPN Gateways

infogreynoise_blogPublished 2025-12-17

GreyNoise is tracking a coordinated, automated credential-based campaign targeting enterprise VPN authentication infrastructure, with activity observed against Cisco SSL VPN and Palo Alto Networks GlobalProtect services.

Original source: https://www.greynoise.io/blog/credential-based-campaign-cisco-palo-alto-networks-vpn-gateways