At GajShield, we believe this highlights an important security principle: critical management, authentication, and portal services on security appliances should never be unnecessarily exposed to the public internet. Firewall hardening, restricted administrative access, timely updates, strong logging, and continuous monitoring are essential parts of a secure deployment.


This incident should not be seen only as a vendor-specific issue, but as a broader industry warning. Security appliances themselves must be treated as high-value targets and protected with the same discipline they are expected to enforce for the rest of the network.


GajShield continues to focus on secure-by-design deployment practices, controlled access to management and authentication services, regular security updates, and clear guidance to customers for reducing exposure of critical services.

Palo Alto Networks warned customers that suspected state-sponsored hackers have been exploiting a critical-severity PAN-OS firewall zero-day vulnerability for nearly a month. [...]

Source: Palo Alto Networks firewall zero-day exploited for nearly a month via Bleeping Computer — published 07 May 2026.