The flaw affecting some internet-exposed firewall management interfaces had been initially disclosed Nov. 8. A critical-severity vulnerability affecting some internet-exposed Palo Alto Networks ...

Malicious hackers have compromised potentially thousands of organizations by exploiting two new zero-day vulnerabilities found in widely used software made by cybersecurity giant Palo Alto Networks.

Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vulnerability that has been actively exploited in ...

Editor's note: This article was updated on 11-19-24 for clarity. Palo Alto Networks (PAN) put out an advisory on Friday, Nov. 15, warning its customers that a critical, unauthenticated remote code ...

A flaw patched last week by Palo Alto Networks is now under active attack and, when chained with two older vulnerabilities, ...

Palo Alto Networks has finally released security updates for two actively exploited zero-day vulnerabilities in its Next-Generation Firewalls (NGFW). The first flaw, tracked as CVE-2024-0012, is an ...