Over 2,000 Palo Alto firewalls hacked using recently patched bugs

Palo Alto Networks reported active attacks chaining two PAN-OS vulnerabilities (CVE-2024-0012 and CVE-2024-9474) that allow attackers to bypass authentication and escalate to root, with threat actors observed dropping malware and executing commands on compromised firewalls; Shadowserver is tracking thousands of vulnerable devices and roughly 2,000 confirmed compromises, and CISA has added the flaws to its Known Exploited Vulnerabilities catalog requiring rapid patching.