Published 3 days ago • loading... • Updated 2 days ago

Palo Alto Networks tags new firewall bug as exploited in attacks

Summary by BleepingComputer

Palo Alto Networks warns that hackers are actively exploiting a critical authentication bypass flaw (CVE-2025-0108) in PAN-OS firewalls, chaining it with two other vulnerabilities to breach devices in active attacks.

5 Articles

All

Left

Center

Right

BleepingComputer

Palo Alto Networks tags new firewall bug as exploited in attacks

3 days ago

Read Full Article

Security Boulevard

PAN-PAN-PAN-OS: Palo Alto Firewalls Under Attack (Again)

Time to Declare an Emergency? Scrotes chain three flaws to take full control—seems pretty easy. The post PAN-PAN-PAN-OS: Palo Alto Firewalls Under Attack (Again) appeared first on Security Boulevard.

2 days ago

Read Full Article

themarketsdaily.com

Boston Financial Mangement LLC Has $7.20 Million Stock Position in Palo Alto Networks, Inc. (NASDAQ:PANW)

Boston Financial Mangement LLC grew its stake in Palo Alto Networks, Inc. (NASDAQ:PANW – Free Report) by 85.7% in the 4th quarter, according to its most recent disclosure with the Securities & Exchange Commission. The firm owned 39,565 shares of the network technology company’s stock after buying an additional 18,262 shares during the quarter. Boston […]

2 days ago

Read Full Article

slashdot.org

Palo Alto Firewalls Under Attack As Miscreants Chain Flaws For Root Access

A recently patched Palo Alto Networks vulnerability (CVE-2025-0108) is being actively exploited alongside two older flaws (CVE-2024-9474 and CVE-2025-0111), allowing attackers to gain root access to unpatched firewalls. The Register reports: This story starts with CVE-2024-9474, a 6.9-rated privile...

2 days ago

Read Full Article

cybernoz.com

Attackers are chaining flaws to breach Palo Alto Networks firewalls

Exploitation attempts targeting CVE-2025-0108, a recently disclosed authentication bypass vulnerability affecting the management web interface of Palo Alto Networks’ firewalls, are ramping up. “GreyNoise now sees 25 malicious IPs actively exploiting CVE-2025-0108, up from 2 on February 13,” the threat intelligence company shared on Tuesday. “This high-severity flaw allows unauthenticated attackers to execute specific PHP scripts, potentially lea…

3 days ago

Read Full Article

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/year