Articles about Palo Alto Networks Firewall Zero-Day vulnerability CVE-2024-3400 (13.4.2024)

[Eyal Estrin]

CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect Gateway

https://security.paloaltonetworks.com/CVE-2024-3400

Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400

https://unit42.paloaltonetworks.com/cve-2024-3400/

CVE-2024-3400 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-3400

Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)

https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

https://www.rapid7.com/blog/post/2024/04/12/etr-cve-2024-3400-critical-command-injection-vulnerability-in-palo-alto-networks-firewalls-2/

"Highly capable" hackers root corporate networks by exploiting firewall 0-day

https://arstechnica.com/security/2024/04/highly-capable-hackers-root-corporate-networks-by-exploiting-firewall-0-day/

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

https://thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html

State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls

https://www.securityweek.com/state-sponsored-hackers-exploit-zero-day-to-backdoor-palo-alto-networks-firewalls/

Palo Alto Networks warns of zero-day in VPN product

https://therecord.media/vpn-zero-day-palo-alto-networks