The Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings regarding multiple vulnerabilities affecting various technologies, including Palo Alto Networks' PAN-OS, which has been targeted by threat actors exploiting a management interface bug identified as CVE-2025-0108. Reports indicate that hackers are chaining exploits of three vulnerabilities in Palo Alto firewalls to gain root access. Additionally, CISA, in collaboration with the FBI, has released a joint advisory regarding the Ghost ransomware group, which has compromised organizations in over 70 countries. This advisory includes actions organizations can take to mitigate risks associated with ransomware activity. Other notable vulnerabilities include high-severity flaws in Microsoft's Bing and Power Pages, as well as critical vulnerabilities in OpenSSH and Citrix's NetScaler Console. Organizations are urged to update their systems promptly to defend against these threats.
SonicWall CVE-2024-53704 : SSL VPN Session Hijacking : https://t.co/K2mxcMTTZq
👉🏻 “Microsoft fixes Power Pages zero-day bug exploited in attacks” 🔗 https://t.co/432LEgA3eA
Second Recently Patched Flaw Exploited to Hack Palo Alto Firewalls https://t.co/K7mVEwz8ND