Hackers on the Hunt: Palo Alto Networks GlobalProtect Under Siege!
Watch out, GlobalProtect users! Threat actors are practicing their best “sneak attack” moves by probing over 24,000 IP addresses. GreyNoise warns that these cyber ninjas are gearing up for a possible exploitation party, with most attacks coming from the US. Time to lock your digital doors and keep those logs on speed dial!
Hot Take:
Looks like hackers are taking a virtual road trip with a pitstop at Palo Alto Networks – but I doubt they’re there for the scenic views. It’s more like a cyber scavenger hunt, and GlobalProtect just happens to be their treasure map. Time for IT teams to put the pedal to the metal on security patches!
Key Points:
- 24,000+ IPs are probing Palo Alto Networks’ GlobalProtect portals for vulnerabilities.
- Activity spiked in March with 20,000 daily login scans detected.
- The majority of the probing IPs are from the US, followed by Canada.
- 3xK Tech GmbH and other hosting services are linked to this activity.
- Organizations are advised to review logs for signs of compromise.
Already a member? Log in here