TechRadar

Major Palo Alto security flaw is being exploited via Python zero-day backdoor

For weeks now, unidentified threat actors have been leveraging a critical zero-day vulnerability in Palo Alto Networks’ PAN-OS software, running arbitrary code on vulnerable firewalls, with root ...
Dark Reading

Palo Alto Network Issues Hotfixes for Zero-Day Bug in Its Firewall OS

Palo Alto Networks (PAN) on April 14 released hotfixes to address a maximum severity zero-day bug in multiple versions of its PAN-OS software that a threat actor is using to deploy a novel Python ...
Ars Technica

“Highly capable” hackers root corporate networks by exploiting firewall 0-day

Highly capable hackers are rooting multiple corporate networks by exploiting a maximum-severity zero-day vulnerability in a firewall product from Palo Alto Networks, researchers said Friday. The ...
Bleeping Computer

Java and Python Contain Security Flaws That Allow Attackers to Bypass Firewalls

Both Java and Python contain similar security flaws that allow an attacker to bypass firewalls by injecting malicious commands inside FTP URLs. The problems arise from the way Java and Python (through ...
Hosted on MSN

Palo Alto Networks firewalls have a wide-open zero-day that gives attackers root access — and there’s no patch until May 13

A critical zero-day vulnerability in Palo Alto Networks firewalls is under active exploitation, giving attackers unauthenticated remote code execution with full root privileges. The flaw, tracked as ...
Bleeping Computer

Palo Alto Networks fixes zero-day exploited to backdoor firewalls

Palo Alto Networks has started releasing hotfixes for a zero-day vulnerability that has been actively exploited since March 26th to backdoor PAN-OS firewalls. This maximum severity security flaw ...
ZDNet

Palo Alto Networks patches zero-day affecting firewalls using GlobalProtect Portal VPN

Researchers with cybersecurity firm Randori have discovered a remote code execution vulnerability in Palo Alto Networks firewalls using the GlobalProtect Portal VPN. The zero-day -- which has a ...