Palo Alto Networks

APRIL 19, 2024

On April 10, 2024 Palo Alto Networks Product Security Incident Response Team (PSIRT) learned of a suspicious exfiltration attempt at a customer site from Volexity's Steven Adair. Rather, it simply means that the attacker created an empty file with a weird name that does not damage the firewall by itself.

Firewall 132

Firewall Systems Review Malware Software Review 132

Tenable

FEBRUARY 9, 2024

CVE Description CVSSv3 Severity CVE-2024-21762 Fortinet FortiOS Out-of-bound Write Vulnerability in sslvpnd 9.6 Medium FG-IR-23-397 Analysis CVE-2024-21762 is an out-of-bound write vulnerability in sslvpnd, the SSL VPN daemon in Fortinet FortiOS. and international agencies.

Malware 121

Malware Authentication Infrastructure Analysis 121

Ivanti

AUGUST 28, 2023

In a previous blog post, I discussed the two main areas to audit before the European Union’s updated Network and Information Security Directive (NIS2) becomes ratified law in October 2024. Review your current supply chain security flaws.

Security 67

Security Technical Advisors Technical Review Compliance 67

Palo Alto Networks

MAY 21, 2024

According to our 2024 Unit 42 Incident Response Report , 90% of SOCs say they rely on manual processes. SOC Analysts Are Burnt Out Everyone knows there is still a shortage of cybersecurity professionals. Intrusion Detection System (IDS) A known malware signature is detected on a system (a potential malware infection).

Malware 94

Malware Report Analysis Network 94

O'Reilly Media - Ideas

JANUARY 25, 2024

Malicious operators have discovered that they can corrupt software archives, getting programmers to inadvertently incorporate malware into their software. Unfortunately, security problems never really go away; we expect software supply chain security to remain an important issue for the foreseeable (and unforeseeable) future.

Trends 119

Trends Technical Review Technology Artificial Inteligence 119

Palo Alto Networks

NOVEMBER 8, 2023

A proliferation of data and devices has been matched by increasingly sophisticated cybercriminals who continuously come up with new ways to evade traditional security measures. AI-Powered Network Security Is Vital to Protecting Modern Organizations Securing the modern connected organization requires an integrated, unified approach.

Cloud 86

Cloud Firewall Malware IoT 86

O'Reilly Media - Ideas

APRIL 2, 2024

AI news is infiltrating other sections of Trends (particularly Programming and Security)—but that’s also hardly news. However, the attack raises a lot of troubling questions about security—including the question of how we know software is trustworthy. Security A supply-chain compromise added a backdoor to Linux’s xz package.

Artificial Inteligence 79

Artificial Inteligence Trends Open Source Linux 79