Coordinated Credential-Based Campaign Targets Cisco and Palo Alto Networks VPN Gateways - GreyNoise

Coordinated Credential-Based Campaign Targets Cisco and Palo Alto Networks VPN Gateways – GreyNoise

GreyNoise is tracking a coordinated, automated credential-based campaign targeting enterprise VPN authentication infrastructure, with activity observed against Cisco SSL VPN and Palo Alto Networks GlobalProtect services over a two-day period in mid-December. 

The activity reflects large-scale scripted login attempts, not vulnerability…

source website