Palo Alto Networks - Security Ticks

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge

exploited, Featured, Malware & Threats, Nation-State, Palo Alto Networks, Zero-Day / SecurityTicks

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge 2024-04-15 at 14:00 By Eduard Kovacs Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge appeared […]

React to this headline:

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge Read More »

State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls

exploited, firewall, Malware & Threats, Palo Alto Networks / SecurityTicks

State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls 2024-04-12 at 23:46 By Ionut Arghire A state-sponsored threat actor has been exploiting a zero-day in Palo Alto Networks firewalls for the past two weeks. The post State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls appeared first on SecurityWeek. This article is an

React to this headline:

State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls Read More »

CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks

Don't miss, exploit, firewall, Hot stuff, News, Palo Alto Networks, Volexity, vulnerability / SecurityTicks

CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks 2024-04-12 at 22:16 By Zeljka Zorz Earlier today, Palo Alto Networks revealed that a critical command injection vulnerability (CVE-2024-3400) in the company’s firewalls has been exploited in limited attacks and has urged customers with vulnerable devices to quickly implement mitigations and workarounds. Palo Alto

React to this headline:

CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks Read More »

Palo Alto Networks Warns of Exploited Firewall Vulnerability

exploited, Featured, firewall, Palo Alto Networks, Vulnerabilities / SecurityTicks

Palo Alto Networks Warns of Exploited Firewall Vulnerability 2024-04-12 at 14:31 By Ionut Arghire Palo Alto Networks warns of limited exploitation of a critical command injection vulnerability leading to code execution on firewalls. The post Palo Alto Networks Warns of Exploited Firewall Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Palo Alto Networks Warns of Exploited Firewall Vulnerability Read More »

Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400)

Don't miss, exploit, firewall, Hot stuff, News, Palo Alto Networks, Volexity, vulnerability / SecurityTicks

Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400) 2024-04-12 at 10:46 By Zeljka Zorz Attackers are exploiting a command injection vulnerability (CVE-2024-3400) affecting Palo Alto Networks’ firewalls, the company has warned, and urged customers to implement temporary mitigations and get in touch to check whether their devices have been compromised. “Palo Alto Networks is

React to this headline:

Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400) Read More »

Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats

Industry news, Palo Alto Networks / SecurityTicks

Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats 2024-04-12 at 10:16 By Industry News Palo Alto Networks announced a new milestone in how security operations centers (SOC) secure the cloud. The new innovations as part of Cortex XSIAM for Cloud bolster the Palo Alto Networks Cortex XSIAM platform to natively

React to this headline:

Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats Read More »

Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption

Palo Alto Networks, Vulnerabilities / SecurityTicks

Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption 2024-04-11 at 13:16 By Eduard Kovacs Palo Alto Networks patches several high-severity vulnerabilities, including ones that allow DoS attacks against its firewalls. The post Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption Read More »

Attackers are targeting financial departments with SmokeLoader malware

Don't miss, finance, Government, Hot stuff, Malware, News, Palo Alto Networks, phishing, spear-phishing, Ukraine / SecurityTicks

Attackers are targeting financial departments with SmokeLoader malware 2024-03-22 at 08:31 By Helga Labus Financially motivated hackers have been leveraging SmokeLoader malware in a series of phishing campaigns predominantly targeting Ukrainian government and administration organizations. The phishing campaign The Ukrainian SSSCIP State Cyber Protection Center (SCPC), together with the Palo Alto Networks Unit 42 research

React to this headline:

Attackers are targeting financial departments with SmokeLoader malware Read More »

Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708)

ConnectWise, Don't miss, exploit, Hot stuff, Huntress, MSP, News, Palo Alto Networks, PoC, remote access, remote management, Shadowserver, vulnerability, WatchTowr / SecurityTicks

Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708) 2024-02-22 at 12:31 By Zeljka Zorz The two ScreenConnect vulnerabilities ConnectWise has recently urged customers to patch have finally been assigned CVE numbers: CVE-2024-1709 for the authentication bypass, CVE-2024-1708 for the path traversal flaw. ConnectWise has also released a newer version of ScreenConnect

React to this headline:

Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708) Read More »

10 cybersecurity startups to watch in 2024

Binarly, cybersecurity, Datadog, Dataiku, Don't miss, Dope Security, Filigran, Gomboc, Google, Hot stuff, KTrust, Lakera, Mitigant, News, Palo Alto Networks, Qevlar AI, Radiant Security, Risk Ledger, Snyk / SecurityTicks

10 cybersecurity startups to watch in 2024 2024-02-21 at 08:01 By Mirko Zorz At Help Net Security, we’ve been following the cybersecurity business landscape closely for the past 25 years. Through our Industry News section, we’ve been tracking the pulse of the cybersecurity world, bringing you product news from companies worldwide. Certain vendors have consistently

React to this headline:

10 cybersecurity startups to watch in 2024 Read More »

QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)

Don't miss, enterprise, Hot stuff, NAS, News, Palo Alto Networks, QNAP, Rapid7, security update, SMBs, vulnerability / SecurityTicks

QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358) 2024-02-14 at 12:46 By Zeljka Zorz QNAP Systems has patched two unauthenticated OS command injection vulnerabilities (CVE-2023-47218, CVE-2023-50358) in various versions of the operating systems embedded in the firmware of their popular network-attached storage (NAS) devices. About the vulnerabilities (CVE-2023-47218, CVE-2023-50358) Both vulnerabilities

React to this headline:

QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358) Read More »

Podcast: Palo Alto Networks Talks IT/OT Convergence

ICS, ICS/OT, Industrial, Palo Alto Networks, SCADA / SecurityTicks

Podcast: Palo Alto Networks Talks IT/OT Convergence 2024-01-31 at 19:47 By SecurityWeek News SecurityWeek interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape. The post Podcast: Palo Alto Networks Talks IT/OT Convergence appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Podcast: Palo Alto Networks Talks IT/OT Convergence Read More »

Palo Alto Networks Completes Acquisition of Talon

Acquisition, Endpoint Security, Funding/M&A, Palo Alto Networks / SecurityTicks

Palo Alto Networks Completes Acquisition of Talon 2023-12-28 at 19:18 By SecurityWeek News Palo Alto Networks completed the acquisition of Talon Cyber Security, an Israeli startup selling a secure browser technology to enterprise customers. The post Palo Alto Networks Completes Acquisition of Talon appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Palo Alto Networks Completes Acquisition of Talon Read More »

“Pool Party” process injection techniques evade EDRs

CrowdStrike, Cybereason, Don't miss, Endpoint Security, Hot stuff, Microsoft, News, Palo Alto Networks, PoC, research, SafeBreach, SentinelOne, threat detection, XDR / SecurityTicks

“Pool Party” process injection techniques evade EDRs 12/12/2023 at 14:01 By Zeljka Zorz SafeBreach researchers have discovered eight new process injection techniques that can be used to covertly execute malicious code on Windows systems. Dubbed “Pool Party” because they (ab)use Windows thread pools, these process injection techniques work across all processes and, according to the

React to this headline:

“Pool Party” process injection techniques evade EDRs Read More »

Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments

ICS/OT, OT, Palo Alto Networks / SecurityTicks

Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments 30/11/2023 at 16:02 By Eduard Kovacs Palo Alto Networks has launched a new rugged firewall for industrial environments and announced several OT security improvements. The post Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments Read More »

Palo Alto Networks adds BYOML framework to Cortex XSIAM 2.0

Industry news, Palo Alto Networks / SecurityTicks

Palo Alto Networks adds BYOML framework to Cortex XSIAM 2.0 13/11/2023 at 19:01 By Industry News It used to take an attacker 44 days on average to exfiltrate data from an organization once it was compromised — now it’s a matter of hours — and with companies taking an average of 5.5 days to initially

React to this headline:

Palo Alto Networks adds BYOML framework to Cortex XSIAM 2.0 Read More »

Resecurity integrates with Palo Alto Networks Cortex XSOAR Marketplace

Industry news, Palo Alto Networks, Resecurity / SecurityTicks

Resecurity integrates with Palo Alto Networks Cortex XSOAR Marketplace 13/11/2023 at 14:03 By Industry News Resecurity announced its integration with the Palo Alto Networks Cortex XSOAR Marketplace, a platform for security orchestration, automation, and response (SOAR). This integration allows Resecurity to offer three of its flagship products, Resecurity Context, Resecurity Risk, and Resecurity IDProtect, to

React to this headline:

Resecurity integrates with Palo Alto Networks Cortex XSOAR Marketplace Read More »

Palo Alto Networks Strata Cloud Manager proactively prevents network disruptions

Industry news, Palo Alto Networks / SecurityTicks

Palo Alto Networks Strata Cloud Manager proactively prevents network disruptions 08/11/2023 at 19:01 By Industry News Palo Alto Networks introduced Strata Cloud Manager, a AI-powered zero trust management and operations solution. With these innovations and over 4,400 machine learning models, Palo Alto Networks is well-positioned to prove the combination of AI and zero trust can

React to this headline:

Palo Alto Networks Strata Cloud Manager proactively prevents network disruptions Read More »

Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security

Chromium, cloud security, Enterprise Browser, Funding/M&A, Identity & Access, Island, M&A Tracker, Palo Alto Networks, Talon / SecurityTicks

Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security 06/11/2023 at 20:31 By Ryan Naraine Technology powerhouse Palo Alto Networks is officially on a billion-dollar shopping spree in the cloud data security space. The post Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security appeared first on SecurityWeek. This article is

React to this headline:

Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security Read More »

Palo Alto Networks to acquire Talon Cyber Security

Industry news, Palo Alto Networks, Talon Cyber Security / SecurityTicks

Palo Alto Networks to acquire Talon Cyber Security 06/11/2023 at 20:04 By Industry News Palo Alto Networks has entered into a definitive agreement to acquire Talon Cyber Security, a pioneer of Enterprise Browser technology. Talon’s Enterprise Browser provides a solution that, combined with Prisma SASE, will enable users to securely access business applications from any

React to this headline:

Palo Alto Networks to acquire Talon Cyber Security Read More »