Security News

Palo Alto Networks warns of PAN-OS firewall zero-day used in attacks
2024-04-12 13:28

Today, Palo Alto Networks warns that an unpatched critical command injection vulnerability in its PAN-OS firewall is being actively exploited in attacks. "Palo Alto Networks is aware of a limited number of attacks that leverage the exploitation of this vulnerability," warns the Palo Alto security bulletin.

Code Keepers: Mastering Non-Human Identity Management
2024-04-12 11:13

Identities now transcend human boundaries. Within each line of code and every API call lies a non-human identity. These entities act as programmatic access keys, enabling authentication and...

Smuggling Gold by Disguising it as Machine Parts
2024-04-12 11:01

Someone got caught trying to smuggle 322 pounds of gold out of Hong Kong. On March 27, customs officials x-rayed two air compressors and discovered that they contained gold that had been "Concealed in the integral parts" of the compressors.

Iranian MuddyWater Hackers Adopt New C2 Tool 'DarkBeatC2' in Latest Campaign
2024-04-12 09:49

The Iranian threat actor known as MuddyWater has been attributed to a new command-and-control (C2) infrastructure called DarkBeatC2, becoming the latest such tool in its arsenal...

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack
2024-04-12 08:56

Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild. Tracked as CVE-2024-3400, the issue has a CVSS...

Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400)
2024-04-12 07:32

Attackers are exploiting a command injection vulnerability affecting Palo Alto Networks' firewalls, the company has warned, and urged customers to implement temporary mitigations and get in touch to check whether their devices have been compromised."Palo Alto Networks is aware of a limited number of attacks that leverage the exploitation of this vulnerability," they said, and thanked Volexity researchers for flagging the issue.

French issue alerte rouge after local governments knocked offline by cyber attack
2024-04-12 05:30

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker
2024-04-12 05:09

Cybersecurity researchers have discovered a credit card skimmer that's concealed within a fake Meta Pixel tracker script in an attempt to evade detection. Sucuri said that the malware is injected...

Apple stops warning of 'state-sponsored' attacks, now alerts about 'mercenary spyware'
2024-04-12 04:46

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks
2024-04-12 04:32

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued an emergency directive (ED 24-02) urging federal agencies to hunt for signs of compromise and enact preventive...