A PAN-OS zero-day gave unauthenticated root on internet-exposed firewalls with no patch available. Palo Alto's advice was to restrict the portal to trusted networks. That advice is sound, and it is the part almost nobody can actually do.
4 min read
Broadcom disclosed a critical vCenter flaw on 29 July and stated plainly that no workaround existed. Five days later an attacker had root on internet-facing appliances across 47 countries.
5 min read
Stolen credentials on an internet-facing portal with no MFA cost $872 million and disrupted prescriptions nationwide. The credential theft was not the interesting failure. The portal answering strangers was.
3 min read
Your published services answer strangers by design, and every control you own starts working after that answer. This is what the gap exposes and where the decision actually belongs.
3 min read