Follow-Up: Arctic Wolf Observes Ongoing Exploitation of Critical Palo Alto Networks Vulnerability CVE-2024-0012 Chained with CVE-2024-9474

Arctic Wolf reports active exploitation of PAN-OS vulnerabilities CVE-2024-0012 and CVE-2024-9474 that can be chained to allow unauthenticated threat actors to gain administrator/root access to affected Palo Alto firewalls; a public PoC was released and Arctic Wolf observed attempts to transfer tools and exfiltrate configuration files. The bulletin urges immediate patching to specified fixed PAN-OS versions, restricting management interface access, and following remediation guidance (including Enhanced Factory Reset for confirmed compromises).