{"id":57734,"date":"2024-11-22T22:33:34","date_gmt":"2024-11-22T22:33:34","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/1000s-of-palo-alto-networks-firewalls-hijacked-as-miscreants-exploit-critical-hole\/"},"modified":"2024-11-22T22:33:34","modified_gmt":"2024-11-22T22:33:34","slug":"1000s-of-palo-alto-networks-firewalls-hijacked-as-miscreants-exploit-critical-hole","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/1000s-of-palo-alto-networks-firewalls-hijacked-as-miscreants-exploit-critical-hole\/","title":{"rendered":"1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole"},"content":{"rendered":"

Thousands of Palo Alto Networks firewalls were compromised by attackers exploiting two recently patched security bugs. The intruders were able to deploy web-accessible backdoors to remotely control the equipment as well as cryptocurrency miners and other malware.<\/p>\n

Roughly 2,000 devices had been hijacked as of Wednesday – a day after Palo Alto Networks pushed a patch for the holes – according to Shadowserver<\/a> and Onyphe<\/a>. As of Thursday, the number of seemingly compromised devices had dropped to about 800<\/a>.<\/p>\n

The vendor, however, continues to talk only of a “limited number” of exploited installations.<\/p>\n