Palo Alto Networks RCE Exploit, PCI DSS 4.0.1 Deadline Reminder & Supply Chain Attack Wave
A busy week in cybersecurity — here's what your business needs to act on right now.
Palo Alto PAN-OS has a critical RCE vulnerability under active exploitation. PCI DSS 4.0.1 full compliance deadline is March 31, 2025 — audit your gaps now. A new supply chain attack compromised 14 npm packages used by thousands of Node.js apps.
CLICK ANY ARTICLE TO READ THE FULL STORY
Palo Alto PAN-OS CVE-2026-0984: Remote Code Execution Under Active Exploitation
Palo Alto Networks confirmed active exploitation of CVE-2026-0984, a critical remote code execution vulnerability in PAN-OS management interfaces. Threat actors are using this to deploy backdoors and pivot into internal networks. CVSS score: 9.3.
PCI DSS 4.0.1 — Are You Ready? Key Requirements Now Mandatory
As of March 31, 2025, all PCI DSS 4.0.1 requirements became mandatory. If you process, store, or transmit cardholder data and haven't completed your gap assessment, you're now out of compliance.
Supply Chain Attack: 14 Malicious npm Packages Downloaded 2.3 Million Times
Security researchers discovered 14 malicious npm packages that had been quietly injecting credential-stealing code into Node.js applications for over 6 months. The packages mimicked popular libraries with typosquatting names.
Adobe Acrobat & Reader: 12 Critical Vulnerabilities Patched
Adobe released security updates for Acrobat and Reader addressing 12 critical vulnerabilities that could allow arbitrary code execution when opening a malicious PDF. Enable automatic updates or deploy via your RMM tool immediately.
CISA Releases Updated Secure-by-Design Guidance for SMBs
CISA published updated Secure-by-Design guidance specifically tailored for small and medium-sized businesses, covering practical steps for implementing MFA, network segmentation, and incident response planning without enterprise-level budgets.
Healthcare Data Breach: 890,000 Patient Records Exposed via Third-Party Vendor
A major healthcare data breach affecting 890,000 patients was traced to a third-party billing vendor that failed to patch a known vulnerability in their patient portal software. A stark reminder that your security is only as strong as your vendors'.
Need Help Addressing These Threats?
Our team monitors these vulnerabilities and can help you patch, assess, and protect your business before attackers strike.