Why is someone mass-scanning Juniper and Palo Alto Networks products?
ID: 90142d8d-9f5c-5c60-b4da-8f202be5d69b
STIX ID: report--90142d8d-9f5c-5c60-b4da-8f202be5d69b
Feed Name: The Register (Security)
Threat Score
Security researchers and telemetry firms observed a large-scale surge in scans and login attempts targeting Juniper Session Smart routers (using the default 't128' account) and Palo Alto GlobalProtect portals; tens of thousands of unique IPs participated, prompting concerns about brute-force credential attacks, botnet scanning, or reconnaissance possibly preceding exploitation, though no confirmed zero-day exploitation has been reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.