tldrdailynews.com logo
Tag

Palo Alto Networks

All articles tagged with #palo alto networks

Frontier AI flaw-hunters warn attackers could gain broad access within months
technology15 days ago

Frontier AI flaw-hunters warn attackers could gain broad access within months

Palo Alto Networks warns that frontier AI cyber models like Mythos and GPT-5.5 can rapidly identify and chain multiple flaws, finding vulnerabilities across hundreds of products and generating working exploits in internal tests (about 70% success) even as most flaws aren’t actively exploited in the wild. False positives run around 30%, and human expertise remains essential. The firm urges a four‑pronged defense—patch quickly, reduce internet exposure, deploy real‑time detection, and integrate AI/automation into security operations—as policy makers weigh limits on powerful AI in cybersecurity.

via Axios|
#ai-exploit-writing#cybersecurity-defense#frontier-ai
Critical PAN-OS zero-day exploited for weeks, attackers gain root access to exposed firewalls
security22 days ago

Critical PAN-OS zero-day exploited for weeks, attackers gain root access to exposed firewalls

Palo Alto Networks warns that a critical PAN-OS zero-day in the User-ID Authentication Portal (CVE-2026-0300) has been exploited for nearly a month, enabling unauthenticated remote code execution with root privileges on Internet-exposed PA-Series and VM-Series firewalls. Attackers deployed Earthworm and ReverseSocks5 tunneling tools, wiped logs to avoid detection, and targeting thousands of devices (Shadowserver cites over 5,400 exposed VM-series firewalls). Cloud NGFW and Panorama are unaffected; patches are slated to begin rolling out on May 13. In the interim, restrict access to or disable the portal. CISA added CVE-2026-0300 to KEV and ordered agencies to secure vulnerable devices by May 9.

via BleepingComputer|
#cve-2026-0300#cybersecurity#palo-alto-networks
Critical PAN-OS Flaw Under Active Exploitation Enabling Root RCE
security23 days ago

Critical PAN-OS Flaw Under Active Exploitation Enabling Root RCE

Palo Alto Networks warns of a critical buffer‑overflow flaw in PAN-OS User-ID Authentication Portal (CVE-2026-0300) that allows unauthenticated remote code execution with root privileges on PA-Series and VM-Series firewalls; the bug is under active exploitation, with a CVSS of up to 9.3 when the portal is internet‑exposed and 8.7 otherwise, and PAN-OS 12.1 is listed as affected.

via The Hacker News|
#cve-2026-0300#palo-alto-networks#pan-os
Wild PAN-OS Flaw Exposes Palo Alto Firewalls to Root Access
cyber-security-news23 days ago

Wild PAN-OS Flaw Exposes Palo Alto Firewalls to Root Access

A critical, unauthenticated buffer overflow in PAN-OS’s User-ID Authentication Portal (CVE-2026-0300) is being exploited in the wild to gain full root access on PA-Series and VM-Series firewalls. The flaw allows remote code execution with no credentials or user interaction over the network, affecting multiple PAN-OS versions (with some product exclusions). Patches are rolling out May 13–28, 2026; meanwhile, admins should restrict or disable internet-facing Authentication Portals and apply Threat Prevention signatures, and audit exposed configurations immediately.

via CyberSecurityNews|
#cve-2026-0300#cyber-security-news#cybersecurity
PANW stock slides after earnings beat but outlook undershoots
market-news3 months ago

PANW stock slides after earnings beat but outlook undershoots

Palo Alto Networks beat Street estimates for Q2 with EPS of $1.03 and revenue of $2.59 billion, but issued lighter guidance for Q3 and full-year 2026, sending the stock down about 5%. The company sees FY2026 EPS of $3.65-$3.70 on revenue of $11.28-$11.31 billion (vs. consensus of about $3.86 and $10.53 billion). Despite the softer outlook, analysts maintain a Strong Buy rating with an average target near $223.68, implying upside.

via TipRanks|
#earnings#guidance#market-news
Palo Alto Networks rides revenue beat but guides softly, shares slide
technology3 months ago

Palo Alto Networks rides revenue beat but guides softly, shares slide

PANW posted a Q2 FY2026 revenue beat and higher-than-expected adjusted EPS, but forward earnings guidance disappointed, sending shares down about 5% after hours. Revenue guidance was raised and exceeded estimates, and acquisitions are expanding real-time data visibility and privileged access management to bolster AI-driven cybersecurity offerings.

via Seeking Alpha|
#eps-beat#guidance-disappointment#palo-alto-networks
Palo Alto Networks to Acquire Koi to Guard AI-Driven Endpoints
technology3 months ago

Palo Alto Networks to Acquire Koi to Guard AI-Driven Endpoints

Palo Alto Networks announced a definitive agreement to acquire Koi to establish Agentic Endpoint Security, addressing the security gaps created by AI agents and tools on endpoints; post-close, Koi’s technology will be integrated with Prisma AIRS and Cortex XDR to improve visibility and policy enforcement for AI-driven operations, with regulatory approvals and closing conditions still to be met and further details to be provided on an investor call.

via Palo Alto Networks|
#agentic-endpoint-security#ai-security#endpoint-security
Asia-based cyberespionage campaign breaches governments worldwide and expands reconnaissance
technology3 months ago

Asia-based cyberespionage campaign breaches governments worldwide and expands reconnaissance

Palo Alto Networks Unit 42 reports an Asia-based cyberespionage group compromised at least 70 institutions across 37 governments and conducted reconnaissance in 155 countries. The attackers used phishing to drop a Cobalt Strike payload and a mix of exploits to gain footholds, with some victims accessed for months (including a parliament and key ministries). The operation is described as potentially the most widespread state-sponsored government breach since SolarWinds, with the group adapting to different targets and events and attribution to a specific country not determined.

via The Record from Recorded Future News|
#cyberespionage#governments#nation-state
Unauthenticated PAN-OS DoS Flaw Forces Quick GlobalProtect Patch
cyber-security-news4 months ago

Unauthenticated PAN-OS DoS Flaw Forces Quick GlobalProtect Patch

Palo Alto Networks patched a critical PAN-OS vulnerability (CVE-2026-0227) that lets unauthenticated attackers trigger a denial-of-service on GlobalProtect gateways/portals. The flaw, rated CVSS 7.7 (HIGH), stems from improper handling of unusual conditions and affects multiple PAN-OS versions (Cloud NGFW is spared). A PoC exists, exploitation is not yet observed, and no workarounds are available. Administrators should upgrade to the latest hotfixes (PAN-OS 12.1.4 or 11.2.10-h2) and verify configurations via Palo Alto’s support portal while monitoring for DoS attempts.

via Cyber Security News|
#cve-2026-0227#cyber-security-news#denial-of-service
Palo Alto Networks and Google Cloud Secure $10 Billion AI and Cloud Deal
technology5 months ago

Palo Alto Networks and Google Cloud Secure $10 Billion AI and Cloud Deal

Palo Alto Networks and Google Cloud have expanded their partnership to enhance AI security across cloud and hybrid environments, integrating Palo Alto's Prisma AIRS with Google Cloud's AI services to protect AI workloads, improve security management, and streamline deployment, while also migrating Palo Alto's internal workloads to Google Cloud to optimize performance and reliability.

via Google Cloud Press Corner|
#ai-infrastructure#ai-security#cloud-security
technology5 months ago

Palo Alto Networks and Google Cloud Partner to Boost Cloud and AI Security

Palo Alto Networks and Google Cloud have expanded their partnership to enhance AI security, integrating Palo Alto's Prisma AIRS platform with Google Cloud's AI infrastructure to secure AI workloads, improve security management, and streamline deployment across hybrid multicloud environments, while also migrating Palo Alto's internal workloads to Google Cloud.

via Palo Alto Networks|
#ai-security#cloud-computing#google-cloud
Palo Alto Networks Stock Soars on Earnings and Optimistic Outlook
business9 months ago

Palo Alto Networks Stock Soars on Earnings and Optimistic Outlook

Palo Alto Networks' stock surged 5% after beating earnings expectations and providing optimistic guidance, despite concerns over its recent merger with CyberArk, which has yet to be fully reflected in its stock price. The company's strong quarterly performance and increased backlog highlight its leadership in security software, even as the merger's impact on shares remains a concern.

via Barron's|
#business#cyberark#earnings