Search: “Cortex XSOAR”

52 stories

Apache Log4j 2 RCE CVE-2021-44228 is actively exploited via crafted JNDI lookups; Palo Alto Unit 42 urges upgrading to Log4j 2.17.1.

Unit 42 details CVE-2021-44228, an easily exploited remote code execution flaw in Apache Log4j 2 where attacker-supplied JNDI lookups in logged user input cause payload download and execution. Massive internet-wide scanning for unpatched systems has begun, with observed follow-on activity including information stealing, Cobalt Strike delivery, and coinmining. The recommended fix is Log4j 2.17.1, which also patches CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Widely used Java software including Apache Struts, Solr, Druid, Flink, ElasticSearch, and Spring Boot is affected.

Palo Alto Unit 42Aug 17, 12:20 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+3 CVEs

Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2026Malware

Enhance Visibility and Automation to Reduce Threat Exposure

Recorded FutureAug 23, 00:00 UTC · Aug 23, 2025Ransomware in the wild

SOC 3.0 - The Evolution of the SOC and How AI is Empowering Human Talent

The Hacker NewsFeb 26, 11:28 UTC · Feb 26, 2025Vulnerability

Threat Brief: Codecov Bash Uploader

Palo Alto Unit 42Jun 6, 12:50 UTC · Jun 6, 2024Malware

Threat Brief: Windows Print Spooler RCE Vulnerability (CVE-2021

Palo Alto Unit 42Jun 6, 12:32 UTC · Jun 6, 2024Vulnerability CVE-2021-34527 CVE-2021-1675

Threat Brief: CVE-2022-30190

Palo Alto Unit 42Jun 5, 20:40 UTC · Jun 5, 2024Vulnerability CVE-2022-30190

Deloitte and Palo Alto Networks help clients increase operational efficiency with new SSDL offering

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2023Advisory

Thales collaborates with Palo Alto Networks to deliver new security integrations for businesses

Help Net SecurityJun 7, 00:00 UTC · Jun 7, 2022Data breach

Deloitte collaborates with Palo Alto Networks to offer zero trust and multi-cloud cybersecurity solutions

Help Net SecurityJul 30, 00:00 UTC · Jul 30, 2021Advisory

Palo Alto Networks Cortex XMDR Specialization empowers customers’ security operations

Help Net SecuritySep 21, 08:06 UTC · Sep 21, 2022Advisory

Multiple Vulnerabilities Discovered in a SCADA System

Unit 42 details five vulnerabilities (CVSS 7.0-7.8) in ICONICS Suite SCADA software enabling privilege escalation and DoS.

Unit 42 discovered five vulnerabilities (CVE-2024-1182, CVE-2024-7587, CVE-2024-8299, CVE-2024-8300, CVE-2024-9852) in ICONICS Suite versions 10.97.2 and earlier for Windows during a 2024 security assessment. The flaws, rated CVSS 7.0-7.8, allow DLL hijacking, privilege escalation, information disclosure, denial-of-service and potentially full system compromise. ICONICS Suite is a SCADA solution with hundreds of thousands of installations in over 100 countries, widely used in critical infrastructure, and several dozen servers are internet-exposed per Unit 42 telemetry. ICONICS released patches and advisories with workarounds in 2024.

Palo Alto Unit 42Aug 19, 12:04 UTC · 28d agoVulnerability CVE-2024-1182 CVE-2024-7587 CVE-2024-8299+2 CVEs1