CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks

Earlier today, Palo Alto Networks revealed that a critical command injection vulnerability (CVE-2024-3400) in the company’s firewalls has been exploited in limited attacks and has urged customers with vulnerable devices to quickly implement mitigations and workarounds. Palo Alto Networks’ Unit 42 and Volexity have now released threat briefs with more information about the attacks, threat hunting queries, YARA rules, and indicators of compromise. PAN’s insights “We are tracking the initial exploitation of this vulnerability under … More →

The post …

alto attacks briefs command command injection critical customers cve cve-2024 cve-2024-3400 devices don't miss exploit exploited firewall firewalls hot stuff injection mitigations networks palo palo alto palo alto networks quickly share the company threat today unit 42 volexity vulnerability vulnerable workarounds