Zero Day Bug Found in Popular Firewalls

[@EmM-ko7mu]

whats with all the vulnerabilities being found this month

[@symbioticparasite6268]

Jacky be hacky

[@archimedesbird3439]

@@johnsmith8981 Stop deifying AI, it's a tech bubble fed by illegally scraped data and nothing more.

[@vigilantmug5028]

Better than feds and other "cyber security specialists" exploiting them as zero days under the radar

[@dogyX3]

The XZ exploit sparked everyone to check their defences again.

[@MaxiTimmi]

@@johnsmith8981 I am sure cyber security companies would be able to use AI as well for their systems so it's unlikely that would happen

[@jonahkrompart]

It’s hilarious that this takes place over the device telemetry channel, AKA the spyware that Palo Alto highly encourages you to not opt out of

[@JacobyB]

because it collects errors 🤯🤯🤯🤯🤯🤯🤯🤯🤯🤯🤯🤯

[@LailSidgar]

@@JacobyB It collects errors. Good thing bugs are features and not errors.

[@ARCNSPUDS]

It doesn’t matter if telemetry is on or not

[@jonahkrompart]

@@ARCNSPUDS Palo specifically recommended in their advisory that you disable telemetry to mitigate the issue, I’m sure you know better than them

[@kilosandkeyboards]

@@jonahkrompart Nah, there was an update from PANW which states that telemetry does not need to be enabled for this CVE to be exploited.

[@Jango1989]

That feeling when the firewall glows brighter than the fire...

[@deef0]

I work in cybersec, got this one on my desk under NDA very late march. Patch was out when they announced it to the rest

[@adrianfisher3349]

I wanted an enterprise grade firewall for my home network so I could gain work experience with it. I couldn't afford any of them I saw and then loads of flaws in them were announced. I then bought a workstation/server and installed OpenBSD on it and love it.

[@adrianfisher3349]

@GhOs7-Operator WiFi isn't very good under OBSD but I used an old Asus router for that, which is connected to my firewall though and Ethernet cable and I have no problems there either. I put 16GB ECC RAM in (this was 2015) which I know is much more than would be needed but it let me setup part of it as a RAM disk so the SSD drive is almost only used during boot ups and software updates to help it last longer.

[@UnlimitedPepsi]

State sponsored threat actors seething hard rn.

[@Immortal-market]

This

[@TheSuperBoyProject]

No, I am fine

[@spacemeter3001]

​@@TheSuperBoyProjectBeing on unemployment benefits doesn't count as "state sponsored"

[@UnlimitedPepsi]

@@spacemeter3001 topkek

[@jakedhale]

@@spacemeter3001 lmao gg

[@jonahhekmatyar]

NSA must be seething this month

[@PoposteriousExe-ph5em]

Lol

[@JosephValentine-o5w]

Seeding***

[@hvher]

Month of vulnurabs

[@Alfred-Neuman]

Yeah wtf is happening?

[@juho1882]

​@@Alfred-Neumanthese are found all the time. people have just been making more videos of them lately

[@zaremol2779]

This isn't a 0-day, this is an alphabet soup agency backdoor

[@ruthlessadmin]

I'm responsible for a pair of Fortigate appliances. We've had to patch out vulnerabilities before but we generally stay on top of it. While we are attacked relentlessly and constantly, we've so far never had a breech (at least not that we know of yet). What's frustrating, is I can't get upper management to take anything seriously, so we have a weak backup policy and no budget to do anything.

[@spacemeter3001]

They'll learn once they get compromised

[@chimagamer4157]

Maybe sell it to them like an insurance policy, you rather pay some money in order not to become bankrupt, incase it does go bad Because this would be the worst possible outcome.

[@dracula7779]

@@spacemeter3001 hopefully, but some still don't

[@Silentguy_]

I manage one at work and a personal one at home. We’ve closed off as much as we can and enabled 2FA on basically everything but with how bad exploits have gotten over the past few years, I take a zero tolerance policy towards updating. If a new update drops, I send out a email saying internet will be offline for about 5 minutes at the end of the day and the only one that can tell me any different is my boss’s boss.

[@YaySyu]

Don't worry, my firewall has a firewall.

[@Exigentable]

good luck pal i'm 7 firewalls deep

[@marconiandcheese7258]

Yo dawg I heard you liked firewalls so I got your firewall a firewall

[@necktwister666]

firewall²

[@nitproject5193]

it doesn't matter if they are on a same network and one of them can be compromized

[@elpsykongr00]

Firecube

[@Daniel-sj2mu]

It was over for Palo Alto once Professor Messer stopped working there

[@fiverZ]

Context?

[@hakawatis]

in 2016 we were only discovering maybe 10K-30K CVE's a year. in 2022 we were discovering 100,000 CVEs a year. in 2024 we're discovering 4x the amount of CVEs a year. goodluck blue team. this year is gonna be hell for you. 😭😭

[@rohanofelvenpower5566]

get out of infosec, its an overworked industry and it will only get worse. bad career choice. like videogaming industry.

[@syedibrahimkhalil786]

@@rohanofelvenpower5566 lol with that mindset, I wonder what insecure world would we live in then. This actually give a survival bias, where in actual there is 'more' need of infosec than running out of it.

[@markmonster3315]

@@rohanofelvenpower5566 Isn't that exactly the reason to get into it?

[@rj7250a]

​@@markmonster3315if you enjoy regular overtime, 10 hours shifts, sometimes and earning 5x less than some dude typing SQL commands at a bank for 10 hours a week, sure. That is basically game dev industry, that is why i always say to new programmers to not do game dev. I do not know about cybersec industry, maybe it is not as bad, since it is more boring than game dev. The pay and working conditions of a programming job is proportional to how boring it is. - me, 2024

[@lokeshchandak3660]

​@@rj7250aso the more boring something is, the better the pay and the better the work conditions? I have a feeling you meant to say inversely proportional...

[@sampatton146]

Back door insisted by the glowies

[@jer1776]

TLDR: Your firewall should have a firewall

[@imjonkatz]

When you wonder if it's a bug or a feature...

[@JacobyB]

???

[@gandalfdaking]

Schizo moment

[@cunjoz]

@@gandalfdaking glowie moment

[@deadshxll]

funnily enough, the Security+ certificate which is considered fundamental cert, provided by CompTIA, actually calls out that security controls themselves have the possibility to be vulnerable and open to attack vectors.

[@chubbycatfish4573]

It's always something, isn't it?

[@_ruddegar]

Keeps me employed!

[@dinguscollective1872]

@@_ruddegar pretty much why this shit is happening lmao. more jobs I guess

[@_ruddegar]

@dinguscollective1872 lol you might be on to something.

[@ditrypand8273]

oh that swag "Won't fix" still gives me chuckle

[@BJ-sq1si]

Your security vulnerability discovery videos are my favorite

[@isbestlizard]

Oh another RCE/hard coded credentials vulnerability? Gee Palo Alto you sure do suck tonight.

[@caine_inu]

It's funny how I was looking at this in the morning & now you published a video about it.

[@isbestlizard]

Make a t-shirt with Monero-chan looking cute and I will buy one

[@susguy446]

💀

[@spacemeter3001]

He should make one where her bare feet and them toes are visible 😛🦶👡

[@gamtax]

I thought he made a bunch long time ago...

[@13thravenpurple94]

Excellent video 👍 Thank you 💜

[@itswilliamanimate]

government agencies stash of exploits getting discovered this month, huh... linux exploit giving ring 0 xz poorly escaped strings in windows this

[@awesomecronk7183]

the windows one has been known of for a long time, getting a 10/10 CVE tagged on rust got it very famous very fast

[@islantay5795]

Someone please tell me where did 0:21 came from. I have to know that 😭😭😭

[@bradbeckett]

It’s very obvious all these remote root backdoors are not simply accidents anymore.

[@denerlkonig277]

Thank you for the video

[@andljoy]

We are on an older panos so we are fine :).

[@lukeskywalker2116]

Nice walkthrough. Thank you.

[@raumfahreturschutze]

The number of bugs in our systems is TOO DAMN HIGH!

[@evccyr]

Vulnerabilities playing April fools the entire month

[@codemiesterbeats]

Im too easily amused "please like and share it" Nice little animation around the like button... Who knows how long this has been a thing but neato

[@tommy_salami108]

It’s not exactly clear which name corresponds to which colors on the tor t shirts. Specifically confused about moondance and royal.

[@Gbennett1425]

I wonder if this is how my university I go to got hacked into. Whoever it was critically damaged or wiped all the virtual machines and had access to tons of private information.

[@alphaomega154]

so then the exploit guard needed for this is something that can watch out the use of any commands on CSS file creation, or watching out the vailidity of the CSS creation itself.

[@Max-mj4sp]

How is that gonna affect Stock Prices of palo. How big of a deal are we talking about.

[@HailScreaM77]

LOL i have worked in a bank that uses Palo alto Firewall, i wonder if they have telemetry on

[@jvav]

couple months ago there was fortinet that had a vulnerability

[@ENNEN420]

"D-disable telemetry to g-get it to stop? John you're smart, will the breach or disabling telemetry lose us more money? "Sir, the telemetry is for just the employees" "Then it's more valuable!!!" "..."

[@asmod4n]

Wait, their WEB UI is running on a Read/Write File System? Thats just asking for trouble.

[@dimasskarabas]

Hacking into someone’s router is the equivalent of “I’m in your walls”

[@abiram3394]

i blame Obama for these bugs

[@Kabodanki]

yes obama and the hackers are for sure russians

[@PoposteriousExe-ph5em]

Aaajhhhhh BuGs 😢

[@pajeetsingh]

What's up with series of critical bugs in the last month? Are they making cyber false flag for force some laws? What's happening?

[@ImZaDi-love]

That hacker in the beginning wearing the mask looks like he was mixing and spinning some vinyl.

[@PoposteriousExe-ph5em]

Looooool

[@MinuteBracelet]

Critical RCE Theory

[@Amipotsophspond]

I wonder if you could build a toaster with out it being a smart appliance, do we have the technology or is it just a unattainable dream?

[@eointhomas2914]

Any hospital or med facility I go too all have Palo Alto’s 😂

[@JoeDueterte]

More of these videos would be appreciated

[@GmodFreak555]

putty also has a vulnerability discovered where private keys can be exposed

[@crimsonlion100]

The only thing keeping Java from being destroyed as it deserves is Minecraft. I tell ya, if I never have to use, or see Java again, I will feel true happiness.

[@zyriab5797]

Isn't the bedrock edition just Minecraft in C++ because of all the problems the Java edition caused? (Shitty GC, etc) You can still find nice MC clones written in other languages as well

[@crimsonlion100]

@@zyriab5797 No, I will never play that facsimile of what Minecraft is. The thing that made Minecraft great was BECAUSE it was written in a language like Java. Java is EASILY reverse engineered, and easily modded. That must stay in place for me to even consider it. Classicube comes CLOSE, but the fact that they restrict themselves to classic is very very unfortunate. Beta 1.7.3 is and has always been the best version of Minecraft. and things like Glowstone are so incomplete it isnt even worth it.

[@Archbtw_]

tf is up with all these vulnerabilities recently?

[@rwxzig]

That picture of Biden was epic :D

[@koensampers5505]

Quite hilarious that I received multiple alerts at work from this incident lmao

[@User-o5l2w]

Can you do a video on kicksecure? Please 🙏

[@crazy_dummie5240]

microsoft SSH man is the harambe of the NSA

[@QuantumKurator]

Vulns in all things held sacred - Linux, Rust, Palo...

[@a_spe_ct]

WEF sponsored code

[@saltypureblood8987]

First you fix zee bugs, then you eat zee bugs.

[@kameronbriggs235]

Once this stuff is used and smarter people integrate into an existing tools with more persistence, good luck.

[@froozynoobfan]

please correct the video, they updated the page, disabeling telemetry does not mitigate the vulnerability!!!

[@kanshank]

Again ? Are we doing good those days or bad ? not sure.

[@Not_cee]

Does firewalls stop ddos

[@kawalier1]

Which cloud?

[@PiotrPavel]

not only Rust, also GO or c# was recomended

[@andreassa]

Yo Kenny, why the hell does Google say you are a “Musical Artist”? Drop the beats, homie.

[@asddw4998]

GOOD MORNING SIRS PLEASE REMIND TO DO THE NEEDFUL AND SFC /SCANNOW

[@jeonghutamilim2259]

"Security" products are bigger target than browsers...

[@signal65]

💥💥💥💥

[@doublesushi5990]

*1:44*

[@Leo_Aqua]

We have a LOT of 10/10 Critical CVEs these days

[@zyriab5797]

CSS confirmed to be evil

[@PoposteriousExe-ph5em]

Yes 😅

[@tetttettamilli6761]

@MO - "Gay Agenda"

[@DeltaNrOne]

Firewall you had 1 job!

[@nasimfaheemalquadir]

I don't even use a firewall on any of my GNU systems.

[@b6yg]

Can you make a don't mess with taxes shirt? on your store?

[@abe-danger]

third major bug this month, woo!

[@PoposteriousExe-ph5em]

WOOOOOOO!!! 5 MILLION LEFT!!!

[@hombre356]

This is going to keep the cybersecurity team at my company pulling their hair out as we use global protect. Glad I am not them.

[@zachalam2232]

Not really… just disable telemetry, apply threat content updates, or upgrade the OS

[@n6ra]

The cursed month

[@yesyesyesgrill-ir2ur]

bro what is going on rn with all the exploits

[@Nik-rx9rj]

Yooooooo, another one?!?!?!

[@JabbaTiure]

Build your own Opnsense firewall. Problem sidestepped.

[@zdrux]

My employer uses PaloAlto and GlobalProtect for our VPN lol

[@realhumanbeingyesyesveryreal]

Chat, are we fucked?

[@OleksandrSe]

Oh boy)

[@lightfox11]

This video is a based win

[@___gg421]

just assume all your software has vulnerabilities

[@lordbarron3352]

Tldr: It's because they didn't install McAfee

[@levigeorge9140]

See, the firewall vulnerabilities only affect you if you actually use a firewall. There is only one solution here.

[@IQof2]

I think Palo Alto is losing control of their code base maintainability.

[@thetransferaccount4586]

nice one there

[@linuxguy1199]

Everybody is getting on the hype train for Rust thinking it's the magic bullet to all their problems. Just like Java was the magic bullet back in the 2010s. It's idiotic to suggest a programming language can be the goto solution for solving security problems in software that is fundamentally not secure.

[@haythamkenway1561]

you really need to take care of your comment section. full of bots and spammers.

[@Heisenberg355]

When you say the letter "s" its really loud and sharp. You need a pop filter or edit it in post, its unbearable at loud volume

[@wichu7131]

wsg

[@ASaltyAcc]

Welp lets see this shit

[@ads-baisgreenock9737]

I dont use a firewall ..i dont use AV my password is the same across all my devices and has been since i was online.. i just hope haxxors see my pathetic shit and move on to somwone more interesting. Is rather be hacked by BH oe RH than have an active attack from NSA or whatever tho.

[@ads-baisgreenock9737]

Dont use firewalls AV bs ....people they dont need your phone keyboard , mic , camera as intel now ....remote neural monitoring is here

[@Mr.Beauregarde]

Hevking first

[@DUMBDUDEGAMER]

So... this is extremely similar to the Solar Winds Orion supply chain attack, with even telemetry being a key part of the attack.

[@immameme]

Firewall situation and Imma1st Don't take my comments seriously. It's only a meme