Palo Alto Networks
Bug lets attackers to bypass even accounts with multi-factor authentication enabled.
You *still* didn't pull your PAN-OS interface off the public internet? Don't say you weren't warned...
Public advisory comes after alleged PAN-OS vulnerability advertised on exploit forum.
Expedition, a migration tool, hit by bug that could allow attackers with network access to "access secrets, credentials, and other data".
Nikesh Arora admits there was "consternation" around the company's platform focus when it was first announced six months ago.
POCs for CVSS 10 bug are out of the bag, tens of thousands are exposed, and telemetry mitigation didn't work.
Patch? You'll need to wait until Sunday. Turn off telemetry (no, really; it's a mitigation!) and go to the pub. OK, maybe don't.
Wait, what? (Patch this one urgently...)