CyberWire Daily PAN-ic mode: The race to secure PAN-OS.
10 snips
Feb 18, 2025 Tim Starks, a senior cybersecurity reporter at CyberScoop, discusses urgent cybersecurity threats, including a critical vulnerability in Palo Alto Networks' firewall that’s actively exploited. He highlights emerging phishing tactics, particularly the new deceptive timesheet emails targeting sensitive data. The conversation reflects on struggles in cybersecurity governance, especially regarding inexperienced appointments in key roles. Tim also explores the need for digital estate planning, emphasizing strategies for securing online assets.
AI Snips
Chapters
Transcript
Episode notes
PAN-OS Vulnerability
- Palo Alto Networks urges immediate patching of a firewall vulnerability.
- Secure external-facing management interfaces is critical to mitigate risk of remote code execution.
iOS Zero-Day
- Update Apple iOS and iPadOS immediately to patch a zero-day vulnerability.
- Enforce physical security measures, as the flaw allows attackers with physical access to bypass protections.
Zelle Scams
- JPMorgan Chase will block Zelle payments to social media contacts to combat scams.
- Use Zelle only for trusted individuals, not social media sellers, due to a lack of purchase protection.