Toggle light / dark theme

Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly three weeks before it came to light yesterday.

The network security company’s Unit 42 division is tracking the activity under the name Operation MidnightEclipse, attributing it as the work of a single threat actor of unknown provenance.

The security vulnerability, tracked as CVE-2024–3400 (CVSS score: 10.0), is a command injection flaw that enables unauthenticated attackers to execute arbitrary code with root privileges on the firewall.

NASA’s next moon spacecraft for humans made one small leap into an altitude chamber for vital testing before it brings astronauts on board.

The Orion spacecraft for Artemis 2 is slated to fly around the moon with four astronauts no earlier than September 2025 — but first, engineers with NASA want to make sure it is ready for the job.