The US cybersecurity giant says hackers are exploiting the high-severity flaw to break into unpatched customer networks.

Attempts to exploit CVE-2024-0108, an authentication bypass vulnerability in Palo Alto firewalls, started one day after disclosure.

A recently disclosed medium-severity bug was chained with critical, older bugs to gain root-level access to PAN firewall systems.

If you want to avoid urgent patches, stop exposing management consoles to the public internet A flaw patched last week by Palo Alto Networks is now under active attack and, when chained with two older vulnerabilities,