PA-Series and VM-Series with User-ID Authentication Portal exposed to untrusted traffic. CL-STA-1132 achieved root RCE, wiped crash logs, enumerated AD, and deployed EarthWorm and ReverseSocks5. Patches start May 13; interim mitigations and forensic indicators for exposed portals.
On April 14, 2026, Jamie Thain submitted draft-thain-ipv8-00 to the IETF. It proposes an internet-layer protocol that wraps all of IPv4 inside a 64-bit address and bundles DHCP, DNS, auth, and logging into a single Zone Server. Contrasting it with how IPv6 was built by WG consensus, I walk through the 'no flag day, just software update' design.
