Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

When Your VPN Opens Your Private Network to the Public

hacktron.ai | blog | #ai-security | #cloud | #reverse-engineering | #jwt | #vpn | #globalprotect | #pan-os | #auth-bypass | #algorithm-confusion

Summary

AI-assisted reverse engineering of stripped PAN-OS binaries uncovered a JWT algorithm confusion flaw in GlobalProtect's Cloud Authentication Service, enabling VPN auth bypass with just a username.
Published
Collected

original ↗

Related coverage

blog · wiz.io
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz Research analyzes NordStellar logs to map credentials harvested by infostealers like Lumma and RedLine, showing how stolen keys and tokens unlock AWS, Azure, GitHub, and AI platforms.
blog · wiz.io
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Wiz earned Leader status in Forrester's Q3 2026 Proactive Security Platforms Wave, scoring 5.0/5.0 on 8 of 21 criteria, including cloud visibility, exposure validation, and remediation augmentation.
High · vulnerability · bishopfox.com
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.
vulnerability · bishopfox.com
PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls
Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
vulnerability · xbow.com
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
back