SURGE IN PALO ALTO NETWORKS SCANNER ACTIVITY INDICATES POSSIBLE UPCOMING THREATS

Summary from the TLDR InfoSec newsletter

There has been a surge in login scanning for Palo Alto Networks PAN-OS GlobalProtect portals, with about 24,000 unique IPs attempting access in the last 30 days. This coordinated effort may indicate a plan to discover and exploit vulnerabilities. Organizations should secure their login portals. The primary sources are the United States and Canada, reflecting patterns from a past espionage campaign targeting network devices and highlighting the need to monitor and secure critical systems.