Palo Alto Firewall Fiasco: Thousands Compromised by Zero-Day Exploits!
Hackers have breached thousands of Palo Alto Networks firewalls by exploiting two patched zero-day vulnerabilities. Despite warnings, attacks persist, affecting a “very small number” of firewalls. Shadowserver reports over 2,700 vulnerable devices, with around 2,000 already compromised. Palo Alto Networks urges customers to secure management interfaces to thwart further attacks.
Hot Take:
Looks like Palo Alto Networks firewalls are hosting a party, and everyone’s crashing it! With hackers exploiting not one, but two zero-day vulnerabilities, the PAN-OS management web interface is the new hotspot for unauthorized access. Time to put up some bouncers and tighten that guest list, folks!
Key Points:
- Two zero-day vulnerabilities in PAN-OS are being exploited: CVE-2024-0012 and CVE-2024-9474.
- Hackers are gaining admin and root privileges, leading to malware drops and command execution.
- Palo Alto Networks warns about ongoing attacks and potential chain exploits.
- Shadowserver has tracked over 2,700 vulnerable devices and 2,000 compromised firewalls.
- CISA has mandated federal agencies to patch these vulnerabilities by December 9.
Already a member? Log in here