EXPLORINEER
en

Archive — US — techcrunch

Palo Alto Networks warns of another firewall vulnerability under attack byhackers

Palo Alto Networks warns of a new vulnerability in PAN-OS under active exploitation by hackers. Discovered as CVE-2025-0108, it allows attackers to access unpatched customer networks by chaining with two previous vulnerabilities. Currently, 25 IP addresses are involved in these attacks, primarily affecting the U.S., Germany, and the Netherlands.

Key points

  • Palo Alto Networks confirmed the exploitation of CVE-2025-0108 in its firewall software.
  • The vulnerability was discovered by Assetnote while analyzing previous vulnerabilities.
  • Attackers are chaining CVE-2025-0108 with CVE-2024-9474 and CVE-2025-0111.
  • Experts note the complexity of the attack is low, allowing unauthenticated access.
  • GreyNoise reported a rise in exploit traffic from 2 to 25 IP addresses in a short period.
  • The highest levels of attack traffic were observed in the U.S., Germany, and the Netherlands.
  • CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog.

Why it matters

  • Rising cyber threats correlate with increased vulnerabilities being reported in various IT frameworks.
  • CVE vulnerabilities are an ongoing trend in cybersecurity, with more organizations vulnerable due to unpatched software.
  • Firewall vulnerabilities have historically been exploited in major cyber incidents, emphasizing the need for prompt patch management.
  • The trend of chaining vulnerabilities is increasingly common in sophisticated cyberattacks, signaling greater risk for organizations.

The alert from Palo Alto Networks highlights the urgent need for proactive cybersecurity measures, especially in patching vulnerabilities to prevent unauthorized access and potential data breaches.