PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices

volexity.com | vulnerability | CVE-2024-3400 | #rce | #zero-day | #vulnerability-research | #threat-intelligence | #memory-forensics | #apt | #exploit | #detection | #0day | #palo-alto-networks | #firewall | #cve-2024-3400 | #palo-alto | #memory-analysis | #surge-collect | #global-protect | #volexity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices May 15, 2024 Volexity Threat Research Last month, Volexity reported on its discovery of zero-day, in-the-wild...
CVE
CVE-2024-3400
Published
Collected

Related coverage

vulnerability · volexity.com
Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)
# Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400) April 12, 2024 Volexity Threat Research > _Volexity would like to thank Palo Alto...
vulnerability · bishopfox.com
PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls
Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
Back