Palo Alto Networks

Threat Advisory/Analysis

CircleCI Incident Highlights Cloud Platform Querying Struggles for Compromised Credentials

On January 4, 2023 CircleCI reported a security incident had occurred. CircleCI recommended, “out of an abundance of caution … to immediately rotate any and all secrets stored in CircleCI.” It was assumed that a hardcoded access ID associated with CircleCI was being used to perform unauthorized actions within CircleCI customers’ cloud environments, such as creating new users, access keys, cloud instances, and serverless functions, as well as modifying existing cloud resources....

Cloud Infrastructure Entitlement Management

Cloud Native Application Protection Platform

Threat Advisory/Analysis

Jan 18, 2023

By Nathaniel Quist, Daniel Prizmant and Steve Alsop

Palo Alto Networks

Products and Services

Partners

Reports, Threat Advisory/Analysis, Threat Prevention

Getting a Handle on the Scale of Modern Malware

Targeted, custom and polymorphic malware is obviously a top concern for security teams. A steady drumbeat of high profile breaches and revelations of highly sophisticated attacks driven by nation-states has bur...

Mar 26, 2013

By Palo Alto Networks

Threat Advisory/Analysis

DNSChanger Rogue DNS Servers Taken Down

Great info from the Palo Alto Networks Product Management Team on the latest events surrounding DNSChanger.

Feb 06, 2012

By Palo Alto Networks

Threat Advisory/Analysis, Threat Advisory/Analysis

Protecting Against the New DLL Attack

Microsoft released a security advisory on Aug 23 that discusses a remote attack vector that allows an attacker to remotely take control of user's machine. The security advisory was in response to a report released by a security researcher t...

Aug 26, 2010

By Anna Lough

Threat Advisory/Analysis

How Palo Alto Network’s Next-Generation Firewalls Protect Against Torpig At...

In this blog, I talk about how our next-generation firewalls protect against botnets such as Torpig. There are 3 parts to a botnet attack:

Aug 19, 2010

By Anna Lough

Application Advisory/Analysis, Application usage & risk report, Firewall, Threat Advisory/Analysis

Real Data Does Not Lie - Existing Security Controls Are Failing

On April 15th, we participated in a very successful webinar with Dark Reading entitled “Why Bad Security Breaches Keep H...

Apr 17, 2009

By Matt Keil