Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.