Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
…A GlobalProtect VPN device decrypts these types of cookies using a configured private key and then trusts the decrypted contents without performing any signature verification. If the same certificate is reused for…