Topic: reconnaissance activity

  • Palo Alto Portal Scans Skyrocket 500%

    Palo Alto Portal Scans Skyrocket 500%

    GreyNoise reported a 500% surge in reconnaissance scans targeting Palo Alto Networks login interfaces, with 1,300 distinct IPs detected on October 3rd, primarily originating from the United States. Similar scanning campaigns have targeted other remote access services like Cisco ASA, with shared c...

    Read More »
  • CISA Warns: Malware Kits Found in Ivanti EPMM Attacks

    CISA Warns: Malware Kits Found in Ivanti EPMM Attacks

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified malware exploiting two vulnerabilities in Ivanti Endpoint Manager Mobile, enabling remote command execution. A China-linked espionage group has been actively using these vulnerabilities as zero-days since mid-May to e...

    Read More »
  • Cisco ASA Firewalls Under Active Attack from Zero-Day Exploits

    Cisco ASA Firewalls Under Active Attack from Zero-Day Exploits

    Cisco has issued an urgent alert to patch two actively exploited zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) affecting its ASA and FTD software. The company, aided by international cybersecurity agencies, also addressed a third critical flaw (CVE-2025-20363) but has not linked it...

    Read More »