Researchers observed a significant increase in malicious scanning of Palo Alto Networks’ GlobalProtect VPN portals, with nearly 24,000 unique IP addresses targeting the systems. This coordinated scanning began on March 17, 2025, peaking at 20,000 IPs daily. The activity raises concerns due to past vulnerabilities like CVE-2024-3400. Security teams are advised to enhance monitoring and block identified malicious IPs.
UK’s Legal Aid Agency Experiences Cyberattack
A UK Ministry of Justice executive agency was targeted in a cyberattack, compromising its systems. The incident highlights vulnerabilities in cybersecurity, prompting a review of
