Hackers exploit DoS flaw to disable Palo Alto Networks firewalls

Palo Alto Networks is warning of CVE-2024-3393, a DNS Security feature DoS vulnerability that is being actively exploited to force firewall reboots and potentially place devices into maintenance mode; the vendor lists affected PAN-OS versions, publishes patched releases for supported versions (while PAN-OS 11.0 is EOL), and provides mitigation steps such as disabling DNS Security logging until fixes are applied.