Palo Alto Networks has fixed a high-severity XML-processing flaw. The same request can crash VM-Series systems or enable root-level code execution on affected PA-Series hardware.
Unit 42 found only 12 of 405 AI-enabled malware samples on production endpoints, exposing the gap between public repositories and operational activity.
Attackers exploited a GlobalProtect authentication-cookie bypass to obtain unauthorized VPN access before a public proof of concept appeared.
Attackers exploited a PAN-OS authentication portal flaw to reach root on exposed firewalls. Patching closes the entry path, but exposed appliances require incident review.
