Palo Alto Networks Globalprotect app is used to establish VPN connections. A vulnerability allows attackers to inject malicious code and install it on vulnerable computers with elevated privileges.

"Palo Alto needs to post their VPN client for download on their web site so that non-tech people don't try Googling it in order to download a copy for their replacement PCs." The GlobalProtect ...

Volexity says it first detected the zero-day exploitation on April 10, 2024, within the GlobalProtect feature of Palo Alto Networks PAN ... Jaguar Tooth' on Cisco IOS routers.

Palo Alto Networks has published its response to the TunnelCrack VPN eavesdropping technique that academics demonstrated earlier this month. The researchers announced that most VPNs could be ...

Palo Alto Networks also announced the launch of a GlobalProtect cloud service. The launch allows partners and customers to bring GlobalProtect's traffic visibility, policy enforcement, threat ...

Researchers with cybersecurity firm Randori have discovered a remote code execution vulnerability in Palo Alto Networks firewalls using the GlobalProtect Portal VPN. The zero-day -- which has a ...

GreyNoise observed a spike in scanning throughout March 2025 Thousands of IP addresses were scanning PAN-OS GlobalProtect portals ... getting ready to attack Palo Alto Network devices, security ...

Hackers have been found impersonating legitimate, enterprise-grade VPN tools in an attempt to compromise large organizations, deploy additional malware, and possibly exfiltrate sensitive information.

The vulnerability is officially known as CVE-2024-3400 and was found in the newer versions of the PAN-OS software that runs on Palo Alto’s GlobalProtect firewall products. Because the ...

I kept a close eye on Palo Alto Networks, even prior to launching ... In addition to RedLock, PAN announced two versions of its GlobalProtect cloud service (1.3 and 1.3.1), which allows ...