Cyble Sensors Uncover Attacks On Apache OFBiz & Palo Alto

Cyble sensor intelligence reports active exploitation attempts targeting multiple high-severity vulnerabilities—notably PAN-OS vulnerabilities CVE-2024-9474 (OS command injection) and CVE-2024-0012 (authentication bypass), and several Apache OFBiz RCE/path-traversal CVEs—while also observing widespread scanning, brute-force attacks, botnet recruitment for DDoS/crypto-mining and related campaigns; the report notes CISA/KEV listings for Palo Alto issues and recommends immediate patching, restricting management interface access, blocking malicious IPs/IoCs, and resetting default credentials as mitigations.