REPORT BREACH

Tag Palo Alto Networks

Operation Lunar Peek: Over 2,000 Palo Alto Network Firewalls Compromised

Significant Compromise of Palo Alto Networks Firewalls Due to Zero-Day Vulnerabilities The Shadowserver Foundation has disclosed that approximately 2,000 Palo Alto Networks firewalls have fallen victim to exploitation via two zero-day vulnerabilities in the company’s PAN-OS software. These vulnerabilities, identified as CVE-2024-0012 and CVE-2024-9474, have enabled unauthorized access to administrative…

Read MoreOperation Lunar Peek: Over 2,000 Palo Alto Network Firewalls Compromised

Prisma Access Browser: Enhancing Security for Web-Based Work – Webinar

Webinar Highlights Security Challenges in Browser-Based Work Environments In a recent webinar hosted by Palo Alto Networks, industry experts addressed the growing security concerns associated with browser-based work environments. As organizations increasingly rely on web browsers for access to corporate data and applications, the vulnerabilities inherent in this shift have…

Read MorePrisma Access Browser: Enhancing Security for Web-Based Work – Webinar

Safeguarding the Future of AI: A Webinar with Palo Alto Networks and Google Cloud

AI-Driven Cloud Security Services, The Future of AI & Cybersecurity Presented by Palo Alto Networks x Google Cloud 60 minutes In the rapidly evolving landscape of artificial intelligence, organizations face an increasingly sophisticated array of cyber threats. As businesses integrate AI technologies, they must navigate new vulnerabilities and guard against…

Read MoreSafeguarding the Future of AI: A Webinar with Palo Alto Networks and Google Cloud

Palo Alto Networks Provides Remediation Steps for Exploited Critical Vulnerability in PAN-OS On April 26, 2024, Palo Alto Networks released guidance to address a severe security vulnerability in PAN-OS that is currently being actively exploited. Identified as CVE-2024-3400, this flaw has a CVSS score of 10.0 and could allow attackers to execute unauthenticated remote shell commands on affected devices. The issue has been patched in various versions of PAN-OS 10.2.x, 11.0.x, and 11.1.x. Evidence indicates that the vulnerability has been leveraged as a zero-day exploit since at least March 26, 2024, by a threat group known as UTA0218. This operation, dubbed Operation MidnightEclipse, involves deploying a Python-based backdoor named UPSTYLE, which can execute commands through specially designed requests. Although these intrusions have not been definitively linked to any known threat actor or organization, observers suspect they may be the work of a state-sponsored hacking group, given the sophistication of the tactics used and the nature of the targets involved. Updated remediation advice has been provided by Palo Alto Networks.

Palo Alto Networks has released essential remediation guidance in response to a critical security vulnerability affecting its PAN-OS software, which is currently under active exploitation. This vulnerability, identified as CVE-2024-3400 and rated with a maximum CVSS score of 10.0, poses a significant risk by allowing unauthenticated remote command execution on…

Read MorePalo Alto Networks Provides Remediation Steps for Exploited Critical Vulnerability in PAN-OS On April 26, 2024, Palo Alto Networks released guidance to address a severe security vulnerability in PAN-OS that is currently being actively exploited. Identified as CVE-2024-3400, this flaw has a CVSS score of 10.0 and could allow attackers to execute unauthenticated remote shell commands on affected devices. The issue has been patched in various versions of PAN-OS 10.2.x, 11.0.x, and 11.1.x. Evidence indicates that the vulnerability has been leveraged as a zero-day exploit since at least March 26, 2024, by a threat group known as UTA0218. This operation, dubbed Operation MidnightEclipse, involves deploying a Python-based backdoor named UPSTYLE, which can execute commands through specially designed requests. Although these intrusions have not been definitively linked to any known threat actor or organization, observers suspect they may be the work of a state-sponsored hacking group, given the sophistication of the tactics used and the nature of the targets involved. Updated remediation advice has been provided by Palo Alto Networks.

Navigating the Intricacies of the AI Supply Chain: Ensuring Pipeline Security Webinar.

Recent developments in AI security highlight the escalating complexity of the AI supply chain, a critical aspect often overlooked in cybersecurity discussions. This emerging area involves numerous interconnected components, including data sources, machine learning models, application programming interfaces (APIs), and the underlying infrastructure, all situated within increasingly dynamic cloud environments.…

Read MoreNavigating the Intricacies of the AI Supply Chain: Ensuring Pipeline Security Webinar.

CISA Issues Warning About Actively Exploited Apache Flink Security Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a significant security vulnerability affecting Apache Flink to its Known Exploited Vulnerabilities (KEV) catalog. This announcement, made on Thursday, highlights the potential risks associated with an open-source framework widely used for unified stream processing and batch processing, amid reports…

Read MoreCISA Issues Warning About Actively Exploited Apache Flink Security Flaw

North Korean Hackers Collaborate with Play Ransomware in Worldwide Cyber Assault

North Korean State-Sponsored Group Partners with Ransomware Actors in Recent Cyberattack A recent report from Palo Alto Networks’ Unit 42 highlights alarming developments in the cybersecurity landscape, revealing a collaboration between the North Korean state-sponsored threat group known as Jumpy Pisces and the financially motivated Play ransomware group. This incident…

Read MoreNorth Korean Hackers Collaborate with Play Ransomware in Worldwide Cyber Assault

RedTail Crypto-Mining Malware Targets Vulnerability in Palo Alto Networks Firewall

RedTail Malware Targets Palo Alto Networks Firewalls in Latest Cyber Attack Recently, cybersecurity analysts have identified an alarming development involving the RedTail cryptocurrency mining malware, which has integrated a newly disclosed vulnerability affecting Palo Alto Networks firewalls into its repertoire of exploits. This vulnerability, cataloged as CVE-2024-3400, has received a…

Read MoreRedTail Crypto-Mining Malware Targets Vulnerability in Palo Alto Networks Firewall