3 ms·

You can sort their announcements by CVSS here: https://security.paloaltonetworks.com/?sort=-cvss https://security.paloaltonetworks.com/?sort=-cvss This is the

You can sort their announcements by CVSS here: https://security.paloaltonetworks.com/?sort=-cvss https://security.paloaltonetworks.com/?sort=-cvss This is their 3rd CVSS 10 in the past 5 years and they've had quite a few more over 9s in the past 5-10 years. I have no idea how that compares to other places like them, maybe they're all like this?

jiggawatts 3y ago
I just saw another vendor’s core network router and firewall product rolled out to replace cloud native routing. It uses public IPs by default with open ports to the Internet to route previously internal-only isolated networks. It uses “military grade” 96 bit encryption (lol), and similarly had a nine-point-something CVE in that endpoint. It was forced upon us because apparently it was vital to encrypt the VM-to-VM intra-cloud traffic that was already mostly HTTPS. This cost merely millions of dollars and broke a bunch of stuff, slowed down that which it didn’t break, and had several brownouts and outages in just a few months since it was rolled out. IT security is mostly snake oil sold by con-men.