Palo Alto Networks confirms mystery zero day now exploited: No patch, no CVE (www.thestack.technology)

submitted 6 hours ago* (last edited 6 hours ago) by Joker@sh.itjust.works to c/technology@lemmy.world

9 comments fedilink hide all child comments

top 9 comments

sorted by: hot top controversial new old

[-] thejml@lemm.ee 39 points 5 hours ago

with the US-based security vendor on November 11 urging customers to pull their management interfaces off the public internet or restrict them to known IP addresses.

Why would you EVER put management interfaces on the public internet? What terrible decisions led them down that path? VPN is so quick and easy at a minimum.

[-] catloaf@lemm.ee 1 points 51 minutes ago

Management interfaces shouldn't even be accessible from the general LAN.

[-] qjkxbmwvz@startrek.website 8 points 3 hours ago* (last edited 3 hours ago)

The network gear I manage is only accessible via VPN, or from a trusted internal network...

...and by the gear I manage, I mean my home network (a router and a few managed switches and access points). If a doofus like me can set it up for my home, I'd think that actual companies would be able to figure it out, too.

[-] Evotech@lemmy.world 6 points 5 hours ago

I know right, 99% of these caves are against management interfaces too

[-] AmidFuror@fedia.io 7 points 3 hours ago

Paleo Alto?

[-] corsicanguppy@lemmy.ca 1 points 3 hours ago

Saw the writing on the wall, there.

[-] lnxtx@feddit.nl 11 points 5 hours ago

https://www.paloaltonetworks.com/ → Leader in Cybersecurity Protection & Software for the Modern Enterprises - Palo Alto Networks

Thanks, I will avoid them.

[-] VonReposti@feddit.dk 10 points 4 hours ago

They're spamming all web logs too with an advertisement for their services in the user agent. I decided to ban them from all my websites because the logs took up too much space.

[-] TheKMAP@lemmynsfw.com 1 points 39 minutes ago

lmao that's not an ad, dude.

this post was submitted on 16 Nov 2024

79 points (98.8% liked)

Technology

59390 readers

2701 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS