White Papers & Advisories - Actively Exploited Zero-Day Vulnerability in Palo Alto Networks Firewalls CVE-2024-3400

White Papers & Advisories

Actively Exploited Zero-Day Vulnerability in Palo Alto Networks Firewalls CVE-2024-3400

2 Pages

Actively Exploited Zero-Day Vulnerability in Palo Alto Networks Firewalls CVE-2024-3400

A severe zero-day vulnerability (CVE-2024-3400) in Palo Alto Networks firewalls is being actively exploited. This critical command injection vulnerability exists within the GlobalProtect Gateway feature and requires a specific configuration for successful exploitation. If exploited, unauthenticated attackers could execute arbitrary code with root privileges, granting them complete control over affected firewalls.

Thank you for getting in touch!

We have received your message and would like to thank you for writing to us.

One of our colleagues will get back in touch with you soon! Have a great day!

Oops! Something went wrong while submitting the form.

Related White Papers & Advisories

Actively Exploited Zero-Day Vulnerability in Palo Alto Networks Firewalls CVE-2024-3400

A severe zero-day vulnerability (CVE-2024-3400) in Palo Alto Networks firewalls is being actively exploited. This critical command injection vulnerability exists within the GlobalProtect Gateway feature and requires a specific configuration for successful exploitation. If exploited, unauthenticated attackers could execute arbitrary code with root privileges, granting them complete control over affected firewalls.

Critical Backdoor in XZ Utils - CVE-2024-3094

A critical vulnerability (CVE-2024-3094) has been identified in XZ Utils versions 5.6.0 and 5.6.1. This data compression utility is widely used in many operating systems, primarily Linux distributions. The vulnerability introduces a backdoor, potentially granting malicious actors full remote control of affected systems. Immediate action is required. XZ Utils is a command-line tool on Unix-like operating systems for file compression and decompression. It also includes a library (liblzma) that other software can use. The backdoor was discovered by a PostgreSQL developer at Microsoft. As of March 30, 2024, there's no evidence of active exploitation, but the situation is evolving.

LockBit Ransomware

LockBit remains a highly active and sophisticated ransomware threat, targeting various critical infrastructure sectors globally. This updated advisory incorporates recent developments in LockBit's activities, including new victim profiles, evolving Tactics, Techniques, and Procedures (TTPs), and exploited vulnerabilities. By understanding these updates, organizations can strengthen their defenses and respond effectively if targeted.