#paloalto

共收录 136 条相关情报。

← 返回所有主题
安全公告2026-09-12 发布INFO

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

CVE-2026-0296

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-09-12 发布INFO

CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

CVE-2026-0299

CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-09-12 发布INFO

CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)

CVE-2026-0297

CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-09-12 发布INFO

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)

CVE-2026-0298

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MED

历史摘要 · 未重新核验 · Palo Alto Security Advisories

威胁情报2026-09-10 发布INFO

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest c

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-09-03 发布INFO

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow de

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-09-02 发布INFO

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Using autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address a

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-08-31 发布INFO

Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams

Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise dom

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-08-28 发布INFO

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, m

历史摘要 · 未重新核验 · Palo Alto Unit 42

安全公告2026-08-27 发布INFO

CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: HIGH)

CVE-2026-0251

CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: HIGH)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

威胁情报2026-08-25 发布INFO

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-a

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-08-21 发布INFO

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-08-20 发布INFO

Identity Abuse Through Trusted Communication Channels

Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discove

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-08-18 发布INFO

Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Ent

历史摘要 · 未重新核验 · Palo Alto Unit 42

安全公告2026-08-12 发布INFO

CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)

CVE-2026-0292

CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-08-12 发布INFO

CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)

CVE-2026-0293

CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-08-12 发布INFO

CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)

CVE-2026-0291

CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-08-12 发布INFO

CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)

CVE-2026-0294

CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-08-12 发布INFO

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW)

CVE-2026-0301

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-08-12 发布INFO

PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH)

PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH)

历史摘要 · 未重新核验 · Palo Alto Security Advisories