Welcome to the Threat and Vulnerability discussion forum. This forum exists as a resource for security professionals to discuss and share information pertaining to the topics of threats and vulnerabilities.
Not a LIVEcommunity member? Simply click here and register!
Welcome to the Threat and Vulnerability Forum
The purpose of this forum is to discuss security vulnerabilities and threats. Palo Alto Networks believes that understanding todays threat landscape is critical to effectively detecting and preventing cyb
...
I am getting this alert Masscan Port Scanning Tool Detection' what can I do that will stop the scanning, I would think I would need to do more that alert and when I check the threat database it didn't really offer much
We received this emergency content update but from what I can research this exploit kit is affecting home and small office routers, has something changed ? or is PA updating to provide coverage for due diligence?
How long i need to wait until i can download On-Prem Broker VM on Support Portal Software Update after activating TMS service on HUB
because until now i can't see menu <Filter the results by On-Prem Broker VM> on the software update menu
During an event investigation, noticed the following behavior:
Is Palo Alto working on signatures/rules for the CVE's listed below ( ICS Advisory (ICSA-19-211-01) )?
CVE‐2019‐12255
CVE‐2019‐12256
CVE‐2019‐12260
CVE‐2019‐12257
CVE‐2019‐12261
CVE‐2019‐12263
CVE‐2019‐12258
CVE‐2019‐12262
CVE‐2019‐12264
CVE‐2019‐12259
CVE‐201
...
We have been getting more and more threat alerts for our outside interface, that hosts our GlobalProtect portal/gateway, and in every alert its because the destination port is 80.
Ive checked and if you browse to our portal on http it redirects to th
...
We have a new security director and I have been tasked with created a few reports about IP traffic.
The request for for the following:
-Top 20 outbound IPs that are NOT in the DNS cache
-Top 20 outbound IPs by data sent
-Top 20 outbound IPs by connectio
...
Hello,
Just wanted to inquire if there are any signatures out for this vulnerability or if not when we could expect it. Thanks.
Hello, i need your help. Iwould like to know how the ildap connection woks. Why are there connections between the PAN directly to the pc and does not go through the AD server?
Is this behavior normal?
The security departament says it´s not normal or th
...
Anyone know which Content Update (released or upcoming) might contain a mitigation for CVE-2019-1181, 1182, 1222, 1226?
I understand there was an original advisory -> CVE-2019-0708 but I'm wondering if there is a specific update for the more recent a
...
Is there any document explaining how and why an application is assigned a certain risk factor?
I have implemented DNS sinkholing and am curious what constitutes investigation. I am seeing some clients hitting the sinkhole but only for a short period (1-2 minutes or less).
I'm not sure if these could be drive-by download attempts, or what they
...
Just wondering on expected release for signature for this Vulnerability?
CVE-2019-9511 till CVE-2019-9518 capable of DoS attack. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, po
I am seeing this traffic on my network from a particular user so thought I would just check out a bit about it, but I can't find any reference to aazufa on the web (via google) other than the threat vault entry.
How come there is a threat which no-on
...
Hello,
We have URL filtering with the PAN-DB license. If a URL is determined to be malicious, (from other URL checking websites, but not from Palo Aloto's yet, since they only categorized it as high risk and unknown at the moment). What is the best wa
...
OtakarKlier
on:
Denial of Service Investigating
