Firewall - Geek Feed

CISA warns of critical Palo Alto Networks bug exploited in attacks

November 8, 2024November 8, 2024 geekfeed0Tagged Account takeover, Actively Exploited, CISA, Expedition, Firewall, Palo Alto Network, Palo Alto Networks, Warning

Today, CISA warned that attackers are exploiting a critical missing authentication vulnerability in Palo Alto Networks Expedition, a migration tool that can help convert firewall configuration from Checkpoint, Cisco, and other vendors to PAN-OS. This security flaw, tracked as CVE-2024-5910, was patched in July, and threat actors can remotely exploit it to reset application admin credentials on Internet-exposed Expedition […]

2 mins read

Custom “Pygmy Goat” malware used in Sophos Firewall hack on govt network

November 5, 2024November 5, 2024 geekfeed0Tagged Backdoor, Firewall, linux, malware, Pacific Rim, Pygmy Goat, Sophos, Sophos XG Firewall

UK’s National Cyber Security Centre (NCSC) has published an analysis of a Linux malware named “Pigmy Goat” created to backdoor Sophos XG firewall devices as part of recently disclosed attacks by Chinese threat actors. Last week, Sophos published a series of reports dubbed “Pacific Rim” that detailed five-year attacks by Chinese threat actors on edge networking devices. One […]

3 mins read

Palo Alto Networks warns of firewall hijack bugs with public exploit

October 10, 2024October 10, 2024 geekfeed0Tagged Command Injection, Cross-site scripting, Expedition, exploit, Exploit Chain, Firewall, Palo Alto Networks, poc, Proof of Concept, SQL Injection

Palo Alto Networks warned customers today to patch security vulnerabilities (with public exploit code) that can be chained to let attackers hijack PAN-OS firewalls. The flaws were found in Palo Alto Networks’ Expedition solution, which helps migrate configurations from other Checkpoint, Cisco, or supported vendors. They can be exploited to access sensitive data, such as […]

2 mins read