US Cyber Command says foreign hackers will most likely exploit new PAN-OS security bug

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/us-cyber-command-says-foreign-hackers-will-most-likely-exploit-new-pan-os-security-bug/

By Catalin Cimpanu
Zero Day
ZDNet.com
June 30, 2020

US Cyber Command said today that foreign state-sponsored hacking groups 
are likely to exploit a major security bug disclosed today in PAN-OS, the 
operating system running on firewalls and enterprise VPN appliances from 
Palo Alto Networks.

"Please patch all devices affected by CVE-2020-2021 immediately, 
especially if SAML is in use," US Cyber Command said in a tweet today.

"Foreign APTs will likely attempt [to] exploit soon," the agency added, 
referring to APT (advanced persistent threat), a term used by the 
cyber-security industry to describe nation-state hacker groups.

CVE-2020-2021 - A RARE 10/10 VULNERABILITY

US Cyber Command officials are right to be panicked. The CVE-2020-2021 
vulnerability is one of those rare security bugs that received a 10 out of 
10 score on the CVSSv3 severity scale.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_