Palo Alto Networks

Vulnerabilities

Palo Alto Networks Researchers Uncover Critical Apple Product Vulnerabilities

Palo Alto Networks researchers were recently credited with discovery of two new Apple product vulnerabilities.

Researchers Tongbo Luo and Bo Qu discovered a webkit vulnerability (CVE-2016-1855) affecting Safari in OS X Mavericks v10.9.5, OS X Yosemite v10.10.5 ...

Threat Prevention

Unit 42

Jun 02, 2016

By Ryan Olson

Palo Alto Networks

Products and Services

Partners

Cybersecurity

Exploitation Demystified, Part 3: Heap-Based Exploits

In my previous blog post in the Exploitation Demystified series, we learned how memory corruption exploits are implemented using stack-based overflow vulnerabilities. Let’s talk now about a main alternative pat...

Apr 13, 2016

By Palo Alto Networks

Threat Prevention, Unit 42

Palo Alto Networks Researcher Discovers Critical Vulnerabilities in Adobe F...

Palo Alto Networks was recently credited with discovery of two new vulnerabilities affecting Adobe Flash Player.

Jan 05, 2016

By Ryan Olson

Cloud Computing, Cybersecurity, Mobility, Predictions

2016 Prediction #8: Rapid Adoption of Mobile Payments will Accelerate Cyber...

This is the eighth in our series of cybersecurity predictions for 2016. Stay tuned for more through the end of the year.

Dec 09, 2015

By Joerg Sieber

Cybersecurity

Exploitation Demystified, Part 2: Overwrite and Redirect

In Part 1 of this series, we laid the foundation of memory corruption exploitation and presented the basic exploitation framework:

Dec 01, 2015

By Palo Alto Networks

Cybersecurity

Exploitation Demystified: Why, What and How, Part 1

Exploits have been the major enabler of advanced persistent threats for over a decade now, but it is only in the recent years that the term has become widely used and acknowledged as a main attack vector.

Nov 02, 2015

By Palo Alto Networks

Cybersecurity

Old Vulnerabilities: The Stuff of Cybersecurity Nightmares

I get this question all the time when speaking at various security events. There are a myriad of security-related problems that keep me up at night, but the one that weighs on my m...

Aug 07, 2015

By Palo Alto Networks

Endpoint, Firewall, Threat Prevention

Vehicle Hacks and The Age of IoT: Breach Prevention is the Only Way Forward

With an increasing number of connected cars coming onto the market over the past several years, it was only a matter of time until we saw a complete r...

Jul 22, 2015

By Sebastian Goodwin

Firewall, Mobility, Security Platform

Taking Needed Steps to Protect Network Connected Devices

The U.S. Food & Drug Administration (FDA) is responsible for the oversight of food and medical products sold in the United States. As such, when it finds previously unknown safety concerns, the FDA takes me...

Jul 13, 2015

By Brian Tokuyoshi

Malware, Threat Prevention, Unit 42

The Latest Flash UAF Vulnerabilities in Exploit Kits

Recently, several popular exploit kits, including Angler, Flash EK, SweetOrange, Fiesta andNeutrino[1], have included several use-after-free (UAF) vulnerabilities in Adobe Flash to exploit victims’ browsers. Pr...

May 28, 2015

By Tao Yan

Endpoint, Threat Prevention, Unit 42

Addressing CVE-2014-6332 SWF Exploit

Continuing a recent trend in which Internet Explorer vulnerabilities are exploited using Flash, samples of an SWF purportedly used in conjunction with CVE-2014-6332 have appeared in several places. The most famous examples of this trend are...

Nov 26, 2014

By Palo Alto Networks

Cybersecurity, Firewall, Threat Advisories - Advisories, Threat Prevention

Palo Alto Networks Discovers Additional 10 Critical Internet Explorer Vulne...

Palo Alto Networks researchers discovered 10 new critical Internet Explorer (IE) vulnerabilities covering IE versions 6, 7, 8, 9, 10 and 11.

Jul 08, 2014

By Scott Simkin

Events, News of the Week

Palo Alto Networks News of the Week – June 13

Interested in all of the top Palo Alto Networks news from this past week? You’re in luck, it’s right here.

Jun 13, 2014

By Chad Berndtson