"Palo Alto Networks Addresses Zero-Day Exploits in Firewalls"
TL;DR
Palo Alto Networks has released hotfixes for a zero-day vulnerability (CVE-2024-3400) actively exploited since March 26th to backdoor PAN-OS firewalls, affecting versions 10.2, 11.0, and 11.1. Threat actors can exploit it remotely to gain root code execution, prompting the company to issue hotfixes and advise disabling device telemetry on vulnerable devices. Security firm Volexity confirmed active exploitation and linked it to state-sponsored threat actors, while CISA has ordered federal agencies to apply threat mitigation or disable telemetry within a week.
Topics:businesscybersecurity#cybersecurity#exploitedvulnerability#firewallsecurity#paloaltonetworks#threatmitigation#zerodayvulnerability
- Palo Alto Networks fixes zero-day exploited to backdoor firewalls BleepingComputer
- Palo Alto Networks Warns of Exploited Firewall Vulnerability SecurityWeek
- “Highly capable” hackers root corporate networks by exploiting firewall 0-day Ars Technica
- Zero-day exploited right now in Palo Alto Networks' GlobalProtect gateways The Register
- Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability The Hacker News
Want the full story? Read the original reporting
Read on BleepingComputer