Security news aggregator

Latest coverage for Palo Alto Networks

Palo Alto Networks develops cybersecurity platforms and products whose vulnerabilities, advisories, and deployments can affect network and cloud security.

14 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Palo Alto Networks develops cybersecurity platforms for network firewalls, cloud and application security, secure remote access, endpoint protection, and security operations. Its firewalls commonly run PAN-OS, enforcing traffic and access policies, inspecting network activity, and collecting telemetry for detection and response.

For practitioners, advisories involving PAN-OS, firewall management interfaces, or remote-access gateways can require rapid exposure assessment, patching, configuration changes, and log review for signs of exploitation. Internet-facing management services and overly broad rules are important attack surfaces; a vulnerability may be more consequential when administrative access or sensitive inspection data is involved. Cloud and endpoint components add identity, API, agent, and data-handling dependencies, so updates should be tested across integrations and privileges. Security teams should validate fixes against asset inventories, monitor relevant indicators, and control access to retained telemetry where privacy or regulatory obligations apply.

Volume over time

Weekly headline count for the current query.

Showing 14 most recent headlines Filtered view

Palo Alto Networks warns that attackers are actively exploiting CVE-2026-0257, a PAN-OS flaw that lets unauthorized users bypass authentication and establish VPN connections. Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, a PAN-OS authentication bypass vulnerability affecting GlobalProtect portals and gateways. Palo Alto Networks addressed the vulnerability on May 13. Two weeks later, cybersecurity firm Rapid7 […]

More from Security Affairs 15 Jun 2026, 11:11 p.m. Actively exploited CVE-2026-0257 Authentication Bypass CVE Exploit Flaw Palo Alto Networks VPN Vulnerability Warning

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Palo Alto Networks PAN-OS flaw, tracked as CVE-2024-21182 (CVSS score of 7.5), to its Known Exploited Vulnerabilities (KEV) catalog. The CVE-2024-21182 flaw is an easily exploitable vulnerability affecting Oracle WebLogic […]

More from Security Affairs 3 Jun 2026, 3:18 a.m. Theme · 6 stories Actively exploited CVE-2024-21182 America CISA CVE Flaw Oracle Palo Alto Networks Vulnerability

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Palo Alto Networks PAN-OS flaw, tracked as CVE-2026-0257 (CVSS score of 7.8), to its Known Exploited Vulnerabilities (KEV) catalog. Palo Alto Networks addressed the vulnerability CVE-2026-0257 on May […]

More from Security Affairs 1 Jun 2026, 8:36 p.m. Theme · 6 stories Actively exploited CVE-2026-0257 America CISA CVE Flaw Palo Alto Networks Vulnerability

CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies and bypass VPN login. Exploitation confirmed since May 17. Palo Alto Networks addressed the vulnerability CVE-2026-0257 on May 13. Two weeks later, cybersecurity firm Rapid7 confirmed active exploitation across multiple customer environments. The flaw impacts the GlobalProtect portal and gateway components of Palo Alto Networks PAN-OS […]

More from Security Affairs 1 Jun 2026, 5:52 a.m. Actively exploited CVE-2026-0257 Bypass CVE Flaw Palo Alto Networks VPN Vulnerability

Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42

More from The Hacker News 18 Apr 2026, 6:01 p.m. CVE-2024-3721 Botnet Compromise CVE DoS Exploit Flaw Fortinet Palo Alto Networks Routers Threat Actor Vulnerability Wireless

Palo Alto Networks warns that hackers are actively exploiting a critical authentication bypass flaw (CVE-2025-0108) in PAN-OS firewalls, chaining it with two other vulnerabilities to breach devices in active attacks. [...]

More from Bleeping Computer 20 Feb 2025, 4:38 a.m. Actively exploited CVE-2025-0108 Authentication Breach Bypass CVE Firewalls Flaw Palo Alto Networks Vulnerability Warning

Suspected state-sponsored hackers have been exploiting a zero-day vulnerability in Palo Alto Networks firewalls tracked as CVE-2024-3400 since March 26, using the compromised devices to breach internal networks, steal data and credentials. [...]

More from Bleeping Computer 14 Apr 2024, 12:35 a.m. Actively exploited CVE-2024-3400 0-Day Backdoor Breach Compromise Credentials CVE Firewalls Nation State Palo Alto Networks Theft Vulnerability