{"id":11616,"date":"2026-07-21T13:58:06","date_gmt":"2026-07-21T19:58:06","guid":{"rendered":"https:\/\/beaconlab.us\/?post_type=publicacion&#038;p=11616"},"modified":"2026-07-21T13:58:07","modified_gmt":"2026-07-21T19:58:07","slug":"alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/","title":{"rendered":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Producto(s) afectado(s):&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>PAN-OS 12.1<\/strong>: versiones anteriores a 12.1.4-h6 y 12.1.7.<\/li>\n\n\n\n<li><strong>PAN-OS 11.2<\/strong>: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12.<\/li>\n\n\n\n<li><strong>PAN-OS 11.1:<\/strong> versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15.<\/li>\n\n\n\n<li><strong>PAN-OS 10.2<\/strong>: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6.<\/li>\n\n\n\n<li><strong>Prisma Access <\/strong>11.2.0: versiones anteriores a 11.2.7-h13.<\/li>\n\n\n\n<li><strong>Prisma Access<\/strong> 10.2.0: versiones anteriores a 10.2.10-h36.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Descripci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Investigadores confirmaron que el grupo de ransomware <strong>Qilin<\/strong> est\u00e1 explotando activamente la vulnerabilidad <strong>CVE-2026-0257<\/strong> en <strong>Palo Alto Networks GlobalProtect<\/strong>, la cual permite a un atacante eludir los controles de autenticaci\u00f3n y establecer conexiones VPN no autorizadas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez obtenido el acceso inicial, los atacantes realizan reconocimiento de la red, extraen credenciales, ejecutan movimientos laterales mediante <strong>PsExec<\/strong>, despliegan herramientas de acceso remoto y, finalmente, cifran los sistemas comprometidos o realizan ataques de doble extorsi\u00f3n mediante el robo de informaci\u00f3n. Debido a la amplia adopci\u00f3n de GlobalProtect en entornos empresariales, esta vulnerabilidad representa un alto riesgo para organizaciones que a\u00fan no han aplicado las actualizaciones de seguridad.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Indicadores de Compromiso (IOC)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Rutas utilizadas por el ransomware<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C:\\PerfLogs\\<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Herramientas observadas durante la post-explotaci\u00f3n<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>PsExec<\/li>\n\n\n\n<li>AnyDesk<\/li>\n\n\n\n<li>Ngrok<\/li>\n\n\n\n<li>LogMeIn<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>T\u00e9cnicas identificadas<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Extracci\u00f3n de credenciales desde <strong>LSASS<\/strong><\/li>\n\n\n\n<li>Robo de la base de datos <strong>NTDS.dit<\/strong><\/li>\n\n\n\n<li>Movimiento lateral mediante recursos administrativos (ADMIN$, C$)<\/li>\n\n\n\n<li>Borrado de registros (Windows Event Logs)<\/li>\n\n\n\n<li>Despliegue de cargas \u00fatiles protegidas con contrase\u00f1a<\/li>\n\n\n\n<li>Cifrado masivo de sistemas<\/li>\n\n\n\n<li>Exfiltraci\u00f3n de informaci\u00f3n hacia servicios de almacenamiento en la nube<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Repositorio oficial de IOC<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>https:\/\/github.com\/rtkwlf\/wolf-tools\/tree\/main\/threat-intelligence\/cookie-crumbles-qilin<\/strong><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se recomienda realizar las siguientes acciones de forma inmediata:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Actualizar <strong>PAN-OS<\/strong> a una versi\u00f3n que incluya la correcci\u00f3n para <strong>CVE-2026-0257<\/strong>.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Producto<\/strong><\/td><td><strong>Versiones afectadas<\/strong><\/td><td><strong>Versiones corregidas<\/strong><\/td><\/tr><tr><td><strong>Cloud NGFW<\/strong><\/td><td>No afectado<\/td><td>Todas las versiones<\/td><\/tr><tr><td><strong>PAN-OS 12.1<\/strong><\/td><td>Versiones anteriores a <strong>12.1.4-h6<\/strong> y <strong>12.1.7<\/strong><\/td><td><strong>12.1.4-h6<\/strong>, <strong>12.1.7<\/strong> o superiores<\/td><\/tr><tr><td><strong>PAN-OS 11.2<\/strong><\/td><td>Versiones anteriores a <strong>11.2.4-h17<\/strong>, <strong>11.2.7-h14<\/strong>, <strong>11.2.10-h7<\/strong> y <strong>11.2.12<\/strong><\/td><td><strong>11.2.4-h17<\/strong>, <strong>11.2.7-h14<\/strong>, <strong>11.2.10-h7<\/strong>, <strong>11.2.12<\/strong> o superiores<\/td><\/tr><tr><td><strong>PAN-OS 11.1<\/strong><\/td><td>Versiones anteriores a <strong>11.1.4-h33<\/strong>, <strong>11.1.6-h32<\/strong>, <strong>11.1.7-h6<\/strong>, <strong>11.1.10-h25<\/strong>, <strong>11.1.13-h5<\/strong> y <strong>11.1.15<\/strong><\/td><td><strong>11.1.4-h33<\/strong>, <strong>11.1.6-h32<\/strong>, <strong>11.1.7-h6<\/strong>, <strong>11.1.10-h25<\/strong>, <strong>11.1.13-h5<\/strong>, <strong>11.1.15<\/strong> o superiores<\/td><\/tr><tr><td><strong>PAN-OS 10.2<\/strong><\/td><td>Versiones anteriores a <strong>10.2.7-h34<\/strong>, <strong>10.2.10-h36<\/strong>, <strong>10.2.13-h21<\/strong>, <strong>10.2.16-h7<\/strong> y <strong>10.2.18-h6<\/strong><\/td><td><strong>10.2.7-h34<\/strong>, <strong>10.2.10-h36<\/strong>, <strong>10.2.13-h21<\/strong>, <strong>10.2.16-h7<\/strong>, <strong>10.2.18-h6<\/strong> o superiores<\/td><\/tr><tr><td><strong>Prisma Access 11.2.0<\/strong><\/td><td>Versiones anteriores a <strong>11.2.7-h13<\/strong><\/td><td><strong>11.2.7-h13<\/strong> o superior<\/td><\/tr><tr><td><strong>Prisma Access 10.2.0<\/strong><\/td><td>Versiones anteriores a <strong>10.2.10-h36<\/strong><\/td><td><strong>10.2.10-h36<\/strong> o superior<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Informaci\u00f3n adicional:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/exploitation-of-cve-2026-0257-leads-to-qilin-ransomware\/\">Cookie Crumbles: How Exploitation of CVE-2026-0257 Leads to Qilin Ransomware &#8211; Arctic Wolf<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/critical-globalprotect-vpn-bug-now-exploited-in-ransomware-attacks\/\">Critical Palo Alto VPN bug now exploited by Qilin ransomware gang<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/security.paloaltonetworks.com\/CVE-2026-0257\">https:\/\/security.paloaltonetworks.com\/CVE-2026-0257<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/docs.paloaltonetworks.com\/pan-os\/10-2\/pan-os-upgrade\/software-and-content-updates\/pan-os-software-updates\">https:\/\/docs.paloaltonetworks.com\/pan-os\/10-2\/pan-os-upgrade\/software-and-content-updates\/pan-os-software-updates<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":11156,"template":"","class_list":["post-11616","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":{"activar_pdf_link":false,"pdf":null,"numero_de_boletin":"","traffic_light_protocol":"Amber"},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"description\" content=\"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t\t<meta property=\"og:image:height\" content=\"469\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-21T19:58:06+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-21T19:58:07+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#listItem\",\"name\":\"Alerta 2026-75 Explotaci\\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#listItem\",\"position\":2,\"name\":\"Alerta 2026-75 Explotaci\\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/\",\"name\":\"Alerta 2026-75 Explotaci\\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab\",\"description\":\"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/PaloAltoNetworks.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#mainImage\",\"width\":2560,\"height\":469},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\\\/#mainImage\"},\"datePublished\":\"2026-07-21T13:58:06-06:00\",\"dateModified\":\"2026-07-21T13:58:07-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab","description":"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores","canonical_url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#listItem","name":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#listItem","position":2,"name":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/es\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/es\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#webpage","url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/","name":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab","description":"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/beaconlab.us\/es\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#mainImage","width":2560,"height":469},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/#mainImage"},"datePublished":"2026-07-21T13:58:06-06:00","dateModified":"2026-07-21T13:58:07-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/es\/#website","url":"https:\/\/beaconlab.us\/es\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"es-ES","publisher":{"@id":"https:\/\/beaconlab.us\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab","og:description":"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores","og:url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png","og:image:width":2560,"og:image:height":469,"article:published_time":"2026-07-21T19:58:06+00:00","article:modified_time":"2026-07-21T19:58:07+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin - Beacon Lab","twitter:description":"Producto(s) afectado(s): PAN-OS 12.1: versiones anteriores a 12.1.4-h6 y 12.1.7. PAN-OS 11.2: versiones anteriores a 11.2.4-h17, 11.2.7-h14, 11.2.10-h7 y 11.2.12. PAN-OS 11.1: versiones anteriores a 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5 y 11.1.15. PAN-OS 10.2: versiones anteriores a 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7 y 10.2.18-h6. Prisma Access 11.2.0: versiones anteriores a 11.2.7-h13. Prisma Access 10.2.0: versiones anteriores","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/12\/PaloAltoNetworks.png"},"aioseo_meta_data":{"post_id":"11616","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-07-21 19:58:07","updated":"2026-07-21 20:25:15","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/es\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/es\/"},{"label":"Alerta 2026-75 Explotaci\u00f3n Activa de Vulnerabilidad en Palo Alto GlobalProtect Utilizada por el Ransomware Qilin","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-75-explotacion-activa-de-vulnerabilidad-en-palo-alto-globalprotect-utilizada-por-el-ransomware-qilin\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11616\/revisions"}],"predecessor-version":[{"id":11617,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11616\/revisions\/11617"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media\/11156"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media?parent=11616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}