Experts warn of Palo Alto firewall exploitation after 2,000 compromises spotted

Researchers and vendors have confirmed active widespread exploitation of two recently disclosed Palo Alto Networks NGFW vulnerabilities (CVE-2024-0012 and CVE-2024-9474). About 2,000 firewalls appear compromised worldwide, with attackers exfiltrating configuration files and credentials and in some cases deploying malware; CISA has ordered federal agencies to patch affected systems.