Palo Alto Networks

Attackers breached 10 organizations with an open-source AI pentest framework

cybercrime, cybersecurity, Don't miss, News, Palo Alto Networks, research /

Attackers breached 10 organizations with an open-source AI pentest framework 2026-11-12 at 17:00 By Mirko Zorz Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data […]

Attackers breached 10 organizations with an open-source AI pentest framework Read More »

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

exploited, Malware & Threats, Palo Alto Networks, PHP, PHP2Shell, Vulnerabilities, vulnerability, WordPress /

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress 2026-10-30 at 17:09 By Ionut Arghire Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. This article […]

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress Read More »

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

0-day, China, CISA, Cisco, CrowdStrike, cyber espionage, Don't miss, DoS, Hot stuff, Linux, News, Palo Alto Networks, PHP2Shell, USA /

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

Don't miss, Hot stuff, News, Palo Alto Networks, Ransomware, Rapid7, ReliaQuest, VPN, vulnerability /

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June 2026-10-21 at 14:13 By Sinisa Markovic Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the […]

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June Read More »

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA, Cisco, CVE, Don't miss, firewall, Hot stuff, News, Palo Alto Networks, vulnerability /

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products 2026-10-15 at 13:43 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, […]

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products Read More »

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

exploited, firewall, Palo Alto Networks, PAN-OS, Vulnerabilities, Zero-Day /

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution 2026-10-15 at 09:59 By Eduard Kovacs The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek. This article is an […]

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution Read More »

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment

automation, critical infrastructure, cybersecurity, hardware, legacy technology, News, Palo Alto Networks, report, survey /

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment 2026-10-07 at 07:50 By Anamarija Pogorelec Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of more than […]

Even with OT network visibility, critical infrastructure operators struggle with legacy equipment Read More »

Palo Alto Networks and NVIDIA want tighter control over AI agents

agentic AI, AI, cybersecurity, identity management, News, NVIDIA, Palo Alto Networks /

Palo Alto Networks and NVIDIA want tighter control over AI agents 2026-09-29 at 13:21 By Anamarija Pogorelec Palo Alto Networks is expanding its work with NVIDIA to help companies control what AI agents can access and do. The collaboration covers agent activity, network traffic and identity management through NVIDIA’s Open Agent Safety Platform reference design. […]

Palo Alto Networks and NVIDIA want tighter control over AI agents Read More »

Palo Alto Networks Acquires AI Agent Platform Console

Artificial Intelligence, M&A Tracker, Palo Alto Networks /

Palo Alto Networks Acquires AI Agent Platform Console 2026-09-01 at 23:29 By SecurityWeek News The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth in next-generation security ARR. The post Palo Alto Networks Acquires AI Agent Platform Console appeared first on SecurityWeek. This article is an excerpt […]

Palo Alto Networks Acquires AI Agent Platform Console Read More »

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

cybercrime, Microsoft Teams, News, Palo Alto Networks, phishing, social engineering /

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks 2026-09-01 at 17:07 By Sinisa Markovic A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ […]

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Read More »

Code review used to be the only way to catch these bugs

cybersecurity, Don't miss, fuzzing, News, Palo Alto Networks, research, vulnerability assessment /

Code review used to be the only way to catch these bugs 2026-08-05 at 14:30 By Mirko Zorz An automated system called NOVA read the source code of 3,915 open-source projects over two months and came back with 14,090 vulnerabilities, each one confirmed through the system’s validation pipeline. Vulnerability researchers at Palo Alto Networks’ Unit […]

Code review used to be the only way to catch these bugs Read More »

Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers

AI, automation, cyberattack, DeepSeek, LLMs, News, Palo Alto Networks, vulnerability /

Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers 2026-08-03 at 16:51 By Sinisa Markovic A Chinese threat actor operating under the aliases “knaithe” and “KnYuan” used multiple LLMs to automate cyberattacks against internet-facing systems with limited human intervention. Researchers at Palo Alto Networks’ Unit 42 uncovered the operation after the threat actor’s […]

Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers Read More »

AI agents are changing where cybersecurity seed funding lands

access management, AI, Cloudflare, cybersecurity, DataTribe, enterprise, investment, money, News, Palo Alto Networks, report, Zscaler /

AI agents are changing where cybersecurity seed funding lands 2026-07-31 at 07:30 By Anamarija Pogorelec Founders pitching a cybersecurity seed round this summer are joining a line that keeps getting longer. Product Hunt launches hit their highest level since late 2023 last quarter, and the Census Bureau’s count of high-propensity business applications kept climbing. Seed […]

AI agents are changing where cybersecurity seed funding lands Read More »

Palo Alto Networks to Acquire Observability Platform Provider Embrace

Acquisition, Funding/M&A, Network Security, Palo Alto Networks /

Palo Alto Networks to Acquire Observability Platform Provider Embrace 2026-07-22 at 17:58 By SecurityWeek News Acquisition follows January’s Chronosphere deal, deepening Palo Alto Networks’ push beyond core security into observability. The post Palo Alto Networks to Acquire Observability Platform Provider Embrace appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Palo Alto Networks to Acquire Observability Platform Provider Embrace Read More »

Palo Alto Networks Patches 13 Vulnerabilities

Palo Alto Networks, patch, patches, Vulnerabilities, vulnerability /

Palo Alto Networks Patches 13 Vulnerabilities 2026-07-09 at 16:49 By Eduard Kovacs Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software. The post Palo Alto Networks Patches 13 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Palo Alto Networks Patches 13 Vulnerabilities Read More »

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials

cybercrime, Microsoft 365, News, Palo Alto Networks, phishing /

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials 2026-06-10 at 17:24 By Sinisa Markovic A new Browser-in-the-Browser (BitB) phishing campaign is targeting Microsoft 365 users with fake login popups designed to closely mimic legitimate browser authentication windows, according to Palo Alto Networks Unit 42. The attack relies on a fake browser […]

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials Read More »

52% of direct-to-IP threats are missing from intelligence feeds

AI, Malware, network, News, Palo Alto Networks, report, threats, traffic monitoring /

52% of direct-to-IP threats are missing from intelligence feeds 2026-06-08 at 07:00 By Anamarija Pogorelec Security tools are good at inspecting websites, domains, URLs, and files, so attackers are moving lower in the stack and communicating directly with IP addresses, where visibility is limited. According to Palo Alto Networks’ report, this creates a visibility gap […]

52% of direct-to-IP threats are missing from intelligence feeds Read More »

Recent Palo Alto Networks Vulnerability Exploited for Weeks

CVE-2026-0257, Palo Alto Networks, Vulnerabilities, vulnerability /

Recent Palo Alto Networks Vulnerability Exploited for Weeks 2026-06-01 at 17:37 By Ionut Arghire Hackers began exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS, four days after public disclosure. The post Recent Palo Alto Networks Vulnerability Exploited for Weeks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent Palo Alto Networks Vulnerability Exploited for Weeks Read More »

Scroll to Top