An undisclosed third-party provider that handles telephony for Cisco's Duo multi-factor authentication (MFA) service recently suffered a social engineering cyberattack. As a result, Cisco Duo customers have been warned to be on alert for follow-on phishing schemes.

On April 10, Volexity discovered a zero-day vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS, which was being used by one of its network security monitoring customers. The Palo Alto Networks’ incident response team confirmed the vulnerability.