Threat Actor
CL-STA-1132
- First Reported
- May 7, 2026
- Latest Reported
- May 8, 2026
Reported Context (2)
- Unit 42 tracks this likely state-sponsored cluster and attributes limited real-world exploitation of CVE-2026-0300 to its activity. Unit 42 Details Limited Exploitation of PAN-OS CVE-2026-0300
- Palo Alto Networks described CL-STA-1132 as a “likely state-sponsored” group behind the firewall exploitation campaign; the article says the company did not attribute the activity to a specific country. Palo Alto Networks Firewall Zero-Day Exploited in Campaign With Possible China Links
CVE (1)
MITRE ATT&CK (8)
Vendors (1)
Products (9)
Tools (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.