Rapid7 Observes New Palo Alto VPN Flaw Exploited in the Wild to Bypass GlobalProtect Authentication

Rapid7 observes new Palo Alto VPN flaw exploited in the wild to bypass GlobalProtect authentication

A flaw fixed last month is now being used in real-life attacks, and security researchers are urging users to patch.

Attackers exploit Palo Alto GlobalProtect flaw days after disclosure

A Palo Alto Networks vulnerability that allows attackers to establish unauthorized VPN access into corporate networks is being actively exploited in the wild, weeks after the company disclosed the flaw as a medium-severity issue and said it was unaware of any attacks. However, according to Rapid7, threat actors began exploiting the bug within days of disclosure. “Rapid7 MDR identified successful exploitation across numerous customers, however we…