Malicious scanning activity targeting Palo Alto Networks GlobalProtect VPN login portals has increased 40 times in 24 hours, indicating a coordinated campaign. Real-time intelligence company GreyNoise ...
A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. The activity started on December 2nd ...
GreyNoise observes 500% spike in scans targeting Palo Alto GlobalProtect and PAN-OS profiles 7% of scanning IPs were malicious; most originated from the US, targeting systems in the US and Pakistan ...