Linux Threat Hunting with Cortex XDR
Take your Linux threat hunting skills to the next level with Cortex XDR and the MITRE ATT&CK framework. Discover strategies and techniques to effectively hunt cyber threats in Linux environments.
Palo Alto Networks
Linux
How Cortex XDR Blocks Log4Shell Exploits with Java Deserialization Exploit ...
Cortex XDR has blocked real attacks on Linux - learn how it does it
CVE-2021-26084 Linux Exploitation in the Wild
Attackers are actively exploiting CVE-2021-26084 Atlassian Confluence vulnerabilities in the wild. Read this blog to view the exact exploit attempts that were detected and blocked by Cortex XDR and learn how ma...
Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux an...
Unit 42 researchers discover Xbash, a new malware family tied to the Iron Group targeting Linux and Microsoft Servers
Multi-exploit IoT/Linux Botnets Mirai and Gafgyt Target Apache Struts, Soni...
Unit 42 has uncovered new variants of the well-known IoT botnets Mirai and Gafgyt.
Unit 42 Finds New Mirai and Gafgyt IoT/Linux Botnet Campaigns
Unit 42 documents the emergence of three malware campaigns built on publicly available source code for the Mirai and Gafgyt malware families that incorporate multiple known exploit...
Threat Brief: Meltdown and Spectre Vulnerabilities
Get an overview of the Meltdown and Spectre vulnerabilities including a risk assessment and calls to action.
The Cybersecurity Canon: The Cathedral & the Bazaar
Amy Butler and Hogan Lovells review “The Cathedral & the Bazaar” for the Cybersecurity Canon.
Palo Alto Networks News of the Week – April 8, 2017
Did you miss any of this week’s Palo Alto Networks action? Don’t worry – we’ve rounded up our top news and views right here.
New IoT/Linux Malware Targets DVRs, Forms Botnet
Unit 42 researchers have identified a new variant of the IoT/Linux botnet “Tsunami”, which we are calling “Amnesia”.
License to Explore: Access the New Virtual Test Lab With Fuel User Group
Access to the Fuel Virtual Test Lab is one of several unique benefits available to Fuel User Group members. Join Fuel to access the Fuel Virtual Test Lab and the Palo Alto Networks...
A Look Into Fysbis: Sofacy’s Linux Backdoor
The Sofacy group, also known as APT28 and Sednit, is a fairly well known cyber espionage group believed to have ties to Russia. Their targets have spanned all across the world, with a focus on government, defen...
Palo Alto Networks Addresses Bash Vulnerability Shellshock: Mitigation for ...
Around 6:00 am PST on September 24, the details of a vulnerability in the widely used Bourne Again Shell (Bash) were disclosed by multiple Linux vendo...
Palo Alto Networks News of the Week – July 18
Here’s a roundup of this week’s top Palo Alto Networks news.
Iptables Backdoor: Even Linux Is At Risk of Intrusion
A backdoor implant is an increasingly common mechanism for maintaining unauthorized access and control over a computer asset. The terms remote administration tool (RAT) and trojan...
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.