Wiz’s Post

🚨 ONGOING: Critical PAN-OS vulnerabilities exploited in cloud environments Wiz Research has observed threat actors actively exploiting CVE-2024-0012 and CVE-2024-9474 to deploy malware in cloud environments. Here's what's happening: 🔑 Combined, these vulnerabilities allow unauthenticated remote code execution. ⚠️ Exploitation in the wild has surged since November 19 when a public, simple-to-execute exploit was released. 📊 Wiz data shows 24% of cloud enterprise environments run vulnerable PAN-OS versions, 7% of which are validated to have publicly facing, exploitable devices. Take action now: 1️⃣ Patch your PAN-OS devices immediately. 2️⃣ Restrict access to trusted IPs to secure your management interface. 3️⃣ For Wiz customers: Use Wiz's pre-built queries and advisory to detect vulnerable instances in your environment. Get the full details and protect your cloud >> https://lnkd.in/dj9dRKHX