#paloalto

共收录 136 条相关情报。

← 返回所有主题
安全公告2026-07-08 发布INFO

PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026) (Severity: HIGH)

PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026) (Severity: HIGH)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)

CVE-2026-0282

CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)

CVE-2026-0281

CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows (Severity: MEDIUM)

CVE-2026-0278

CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)

CVE-2026-0288

CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)

CVE-2026-0285

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)

CVE-2026-0286

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)

CVE-2026-0276

CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-07-08 发布INFO

CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)

CVE-2026-0287

CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

威胁情报2026-07-07 发布INFO

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll,

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-07-02 发布INFO

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn re

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-07-01 发布INFO

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-25 发布INFO

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolk

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-23 发布INFO

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-22 发布INFO

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data s

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-16 发布INFO

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-15 发布INFO

Inside the Modern SOC: The 72-Minute Race

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed gap with Unit 4

历史摘要 · 未重新核验 · Palo Alto Unit 42

安全公告2026-06-13 发布INFO

CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities (Severity: MEDIUM)

CVE-2026-0249

CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities (Severity: MEDIUM)

历史摘要 · 未重新核验 · Palo Alto Security Advisories

威胁情报2026-06-12 发布INFO

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating syst

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-11 发布INFO

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi

历史摘要 · 未重新核验 · Palo Alto Unit 42