Search: “Cortex Cloud”

31 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 31 Malware 23 Ransomware 18 Industry 17 Exploit / PoC 12 Threat actor 6 Advisory 5 AI safety & security 5 Research 5 Data breach 4 Policy & legal 4 Phishing & fraud 2 AI research 2 Tools 1

SeverityAll critical 55 high 27 medium 29 low 6 info 18

Multiple Vulnerabilities Discovered in a SCADA System

Unit 42 details five vulnerabilities (CVSS 7.0-7.8) in ICONICS Suite SCADA software enabling privilege escalation and DoS.

Unit 42 discovered five vulnerabilities (CVE-2024-1182, CVE-2024-7587, CVE-2024-8299, CVE-2024-8300, CVE-2024-9852) in ICONICS Suite versions 10.97.2 and earlier for Windows during a 2024 security assessment. The flaws, rated CVSS 7.0-7.8, allow DLL hijacking, privilege escalation, information disclosure, denial-of-service and potentially full system compromise. ICONICS Suite is a SCADA solution with hundreds of thousands of installations in over 100 countries, widely used in critical infrastructure, and several dozen servers are internet-exposed per Unit 42 telemetry. ICONICS released patches and advisories with workarounds in 2024.

Palo Alto Unit 42Aug 19, 12:04 UTC · 28d agoVulnerability CVE-2024-1182 CVE-2024-7587 CVE-2024-8299+2 CVEs1

Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2024Vulnerability

[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications

The Hacker NewsMay 17, 04:07 UTC · May 17, 2025Vulnerability

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes

The Hacker NewsDec 10, 12:40 UTC · Dec 10, 2025Vulnerability

AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

Palo Alto Unit 42Jun 5, 22:41 UTC · Jun 5, 2024Vulnerability CVE-2021-3100 CVE-2021-3101 CVE-2022-0070+2 CVEs

Palo Alto Networks devices affected by CVE-2022

Security AffairsApr 7, 18:41 UTC · Apr 7, 2022Vulnerability CVE-2022-0778

Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case Studies

Palo Alto Unit 42Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability

Identifying a BOLA Vulnerability in Harbor, a Cloud

Unit 42 found a BOLA flaw, CVE-2024-22278 (CVSS 6.4), letting Maintainers improperly alter Harbor project metadata; fixed in versions 2.9.5, 2.10.3, and 2.11.0.

Unit 42 researchers identified a broken object-level authorization flaw, CVE-2024-22278, in Harbor, a CNCF-graduated cloud-native container registry with 1.8 million downloads. The flaw (CVSS 6.4) lets users with the Maintainer role create, update, and delete project metadata, actions reserved for ProjectAdmin, risking data exposure, integrity compromise, and circumvention of vulnerability scanning. Harbor patched the issue in versions 2.9.5, 2.10.3, and 2.11.0. The finding came from Unit 42's automated BOLA detection tool built on generative AI.

Palo Alto Unit 42Aug 17, 12:35 UTC · Aug 17, 2026Vulnerability CVE-2024-22278