Active Exploitation of Internet-Facing Infrastructure and Endpoints

An October 19 update names Qilin and Inc in Palo Alto GlobalProtect exploitation reportedly ongoing since June, while other secondary reports describe Ivanti Connect Secure exploitation. FortiSIEM exploit code is also reported public, but the article says there is no evidence of in-the-wild use. Verify vendor advisories and distinguish confirmed exploitation from proof-of-concept availability.