Attackers are actively exploiting a vulnerability to disable Palo Alto Networks firewalls, the company reports. Security updates for the issue have been made available. The vulnerability, designated CVE-2024-3393, resides in PAN-OS, the operating system that runs on Palo Alto Networks’ firewalls. When an unauthenticated attacker sends a malicious DNS packet to the firewall, the vulnerability

Tens of thousands of firewalls from manufacturer SonicWall that can be accessed from the internet contain critical vulnerabilities or are end-of-life. This is what security company Bishop Fox states based on its own research. The company surveyed the number of SonicWall firewalls and counted 430,000 devices. Of these, more than 20,000 were no longer supported.

A 32-year-old Ukrainian man who stole millions of credit card details using SQL Injection and then sold them on the Internet has been sentenced in the United States to 69 months in prison, the same amount of time he has already served. He must also pay one affected victim $1.8 million in compensation. According to

The Irish privacy regulator DPC imposed a fine of 251 million euros on Meta due to a major data breach with Facebook in 2018. By abusing user tokens, unauthorized third parties managed to obtain data from 29 million users, including three million European users. This included full name, email address, telephone number, location, work location,

Federal US government agencies have been given six months to secure their Microsoft 365 environments according to specific guidelines, the US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has announced. CISA has the option to oblige federal government agencies to take certain actions via a “Binding Operational Directive” in order to protect