Thousands of Palo Alto Devices Breached via Recent Vulnerabilities

Over 2,000 Palo Alto Networks devices have been compromised in a cyber attack exploiting newly disclosed vulnerabilities, CVE-2024-0012 and CVE-2024-9474, which allow authentication bypass and privilege escalation. The majority of infections are in the U.S. and India. Palo Alto Networks warns of escalating attacks and advises users to apply fixes and secure management interfaces. The company notes that the actual number of affected devices is smaller than reported, as most customers follow best practices.