Massive Surge in Palo Alto Login Scans: Are Hackers Plotting a New Attack?
Security experts are scratching their heads as reconnaissance activity targeting Palo Alto Networks login portals skyrockets by 500%. GreyNoise reports 1300 IP addresses in the mix, with 91% hailing from the US. As if the drama wasn’t enough, Cisco ASA and SonicWall have also joined the reconnaissance party.
Hot Take:
Looks like hackers are eyeing Palo Alto Networks’ login portals like a kid in a candy store with a sudden sugar rush! With reconnaissance activity skyrocketing, it seems like cybercriminals are either getting really bored or really ambitious. Time to tighten those digital belts, folks!
Key Points:
- Massive increase in reconnaissance activity targeting Palo Alto Networks login portals.
- GreyNoise observed a jump from 200 to about 1300 IP addresses in a single day.
- Majority of suspicious IPs located in the US, followed by the UK, Netherlands, Canada, and Russia.
- No direct correlation yet between activity and new vulnerability disclosures.
- Similar scanning patterns observed in Cisco ASA products.
Already a member? Log in here