Palo Alto Firewall Fiasco: Over 2,000 Devices Compromised by Zero-Day Exploits
Thousands of Palo Alto Networks firewalls were hacked due to exploits of recently patched zero-day vulnerabilities. Attackers bypassed authentication, gaining admin privileges and installing web shells for persistent access. The zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, have been added to CISA’s Known Exploited Vulnerabilities catalog.
Hot Take:
Well, it seems like someone left the firewall gates wide open, and the hackers came in faster than a cat on a hot tin roof! Palo Alto Networks is now the latest victim of the zero-day vulnerability express, with over 2,000 firewalls compromised. Note to self: when patching vulnerabilities, make sure to keep the door shut until you’re done!
Key Points:
- More than 2,000 Palo Alto Networks firewalls compromised using zero-day vulnerabilities.
- The vulnerabilities in question are CVE-2024-0012 and CVE-2024-9474 in PAN-OS.
- Exploits allow attackers to gain administrative or root privileges.
- Most compromised devices are located in the US and India.
- CISA added the vulnerabilities to its Known Exploited Vulnerabilities catalog.
Already a member? Log in here