Palo Alto Firewall Fiasco: Thousands Compromised Despite Fewer Vulnerabilities
Roughly 2,000 Palo Alto Networks firewalls have been compromised due to a PAN-OS zero-day vulnerability. The critical flaw, CVE-2024-0012, allows attackers to gain admin privileges. Patches are available, but the threat persists, especially for devices with exposed management interfaces. Most affected are located in the US and India. Stay vigilant!
Hot Take:
Looks like hackers are having a field day playing ‘Capture the Firewall’ with Palo Alto Networks’ firewalls. Who knew that the latest viral trend would involve zero-days and admin privileges? It’s a shame the firewalls didn’t come with an “Unhackable” badge as a default setting!
Key Points:
- Palo Alto Networks confirmed two exploited vulnerabilities: CVE-2024-0012 and CVE-2024-9474.
- Approximately 2,000 firewalls have been compromised, with most cases in the US and India.
- Patches have been released for PAN-OS versions 11.2, 11.1, 11.0, 10.2, and 10.1.
- Hackers are using these vulnerabilities to gain admin and root privileges.
- Security firms are urging to secure management interfaces and monitor for indicators of compromise (IoCs).
Already a member? Log in here