Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Emerging Threat: PAN-OS CVE-2025-0108

On February 12, 2025, Palo Alto Networks announced CVE-2025-0108, a high severity (8.8) authentication bypass vulnerability affecting Palo Alto Networks PAN-OS management web interface. Successful exploitation of this vulnerability allows unauthenticated attackers with network access to invoke certain PHP scripts without proper authentication. While it does not lead to remote code execution, it impacts the confidentiality and integrity of the affected system.

Corelight delivers data aggregation to reduce SIEM ingest by 50-80% compared to legacy network security monitoring tools

According to Forrester Research, “How do we reduce our SIEM ingest costs?” is one of the top inquiries they receive from clients. Many security organizations rely on SIEMs for their detection, investigation, and response workflows, ingesting critical security information and events to detect and respond to threats.

The Market Has Spoken: Cato Networks Soars with 46% ARR Growth in 2024

This past year was a defining one for all of us at Cato Networks and for the industry at large. The enterprise networking and security market is undergoing a seismic shift—one that we have long anticipated. The days of fragmented, bolt-on security solutions are over. The market has spoken, and it’s clear: enterprises demand a single, converged platform to securely connect their operations everywhere. Cato is delivering exactly that.

Mastering PCAP Analysis: Tips and Tools for Effective Network Insights

In the world of network security, understanding what’s traveling across your network is pivotal. One of the most effective tools for this task is PCAP analysis (Packet Capture analysis). Here at Fidelis Security, we’re dedicated to empowering you with knowledge and tools like our Network Detection and Response (NDR) solution to safeguard your network traffic. Let’s dive into how to master PCAP analysis.

Top Automated Network Asset Discovery Tools & Their Benefits

Keeping track of every device on your network can feel overwhelming, especially as IT environments grow more complex. Automated network asset discovery simplifies this challenge by continuously identifying and monitoring all connected devices, ensuring complete visibility and stronger security. With the right asset discovery software, businesses can detect unauthorised devices, manage IT resources efficiently, and reduce security risks.

Understand and detect MITRE Caldera with Zeek

MITRE’s Caldera is a cybersecurity platform developed to simulate adversarial tactics, techniques, and procedures (TTPs). Built upon the MITRE ATT&CK framework, Caldera is an open-source tool designed to help cybersecurity professionals and organizations assess their defenses, uncover vulnerabilities, and enhance their overall security posture. By emulating real-world cyber threats, Caldera enables blue teams to test detection and response mechanisms under realistic conditions.

Alert Fatigue: The Hidden Risk & How NDR Solves It! #cybersecurity #ndr

Is your security team drowning in alerts? False positives, low-priority warnings, and overwhelming notifications can lead to alert fatigue—causing real threats to slip through the cracks. In this video, we break down: What alert fatigue is and why it’s dangerous. The costly impact on your security operations. How NDR (Network Detection & Response) leverages AI and behavioral analysis to filter out noise and highlight real threats. Why Fidelis Network helps your team focus on what really matters.

How to Maintain Network Security During a NetSuite Implementation

NetSuite is one of the most secure Enterprise Resource Planning (ERP) software systems available, including multi-factor authentication and token-based application authentication. However, implementing NetSuite is often a long process that can entail numerous contractors and other parties working within your system. During the transfer and adjustment period, you must take extra care with your data security to ensure that everything is moved properly and no data is lost. Today, we'll explore how you can ensure that your data is safe during this critical transition period.

Why FWaaS Is the Only Way Out of Endless Appliance Patching

There was a time when owning a cassette or video player came with a side gig as a repair technician. Whether it was cleaning tape heads, fixing jammed reels, or rewinding tapes, maintenance was unavoidable. With streaming services, all of that effort has become a relic of the past. Music and videos now live in the cloud, accessible at any time, without the headaches of hardware upkeep. It’s a seamless experience—no more troubleshooting, just pure content consumption.

Exploited! PANOS Authentication Bypass Vulnerability (CVE20250108)

Recently, Palo Alto Networks disclosed CVE‑2025‑0108—a high-severity authentication bypass in the PAN‑OS management web interface. Although the flaw does not enable remote code execution, it compromises the confidentiality and integrity of management functions. In this post, we’ll break down the technical details, discuss the exploitation methodology, illustrate configuration and code examples, and outline effective mitigation strategies.