article thumbnail

CVE-2024-3400 (CVSS 10): Critical 0-Day Flaw in Palo Alto Networks Firewall Software Exploited in the Wild

Penetration Testing

Palo Alto Networks has disclosed a severe zero-day vulnerability (CVE-2024-3400) affecting its market-leading firewall software, PAN-OS. This vulnerability carries a CVSS score of 10.0, indicating its critical severity.

Firewall 111
article thumbnail

CVE-2024-25089: RCE Risk in Malwarebytes Binisoft Windows Firewall Control

Penetration Testing

Recently, two security vulnerabilities have been identified in Malwarebytes Binisoft Windows Firewall Control, a widely-used tool that enhances the capabilities of the Windows Firewall.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Palo Alto Firewalls Under Attack: Critical Flaw Exploited to Deploy Cryptojacking Malware

Penetration Testing

Palo Alto Networks’ popular firewall appliances are currently in the crosshairs of cybercriminals.

Firewall 111
article thumbnail

CVE-2024-22144: Critical Flaw in Popular WordPress Security Plugin Exposes 200,000+ Sites

Penetration Testing

Security researcher ‘stealthcopter‘ has exposed a severe security hole in the widely used WordPress Anti-Malware Security and Brute-Force Firewall plugin (GOTMLS). This vulnerability, labeled CVE-2024-22144 with a “Critical” CVSS score of 9.0,

article thumbnail

CVE-2024-1019: Exposing ModSecurity’s Critical WAF Bypass Flaw

Penetration Testing

Developed by Trustwave’s SpiderLabs, this open-source web application firewall (WAF) engine supports Apache, IIS, and Nginx. It’s... The post CVE-2024-1019: Exposing ModSecurity’s Critical WAF Bypass Flaw appeared first on Penetration Testing.

article thumbnail

Nation-State Hackers Breach Cisco Devices in “ArcaneDoor” Espionage Campaign

Penetration Testing

A sophisticated and ongoing cyberattack dubbed “ArcaneDoor” has breached Cisco firewalls across the globe.

article thumbnail

Vulnerability Recap 4/29/24 – Cisco, Microsoft, Palo Alto & More

eSecurity Planet

April 22, 2024 CISA Adds 2022 Windows Print Spooler Vulnerability to KEV Catalog Type of vulnerability: Elevation of privilege. Federal agencies have until May 14, 2024, to apply patches or disable vulnerable software. Consider reading more about forensic tools and processes to investigate attacks. The problem: The CVSS 10.0/10.0