Santa Clara, Calif., June 10, 2014 – Palo Alto Networks® (NYSE: PANW), the leader in enterprise security, today announced that the company’s threat research team identified 21 critical zero-day vulnerabilities affecting Microsoft’s Internet Explorer. The vulnerabilities, which were disclosed in the June 2014 Microsoft Security Bulletin, could allow cyber attackers to steal data, perform Advanced Persistent Threats (APTs), or otherwise compromise enterprise networks. Each of these vulnerabilities has been given the highest severity rating of “critical” by Microsoft, meaning they can be used to silently deliver threats to users, including increasingly prevalent drive-by downloads, without a user’s knowledge.

According to research from NetMarketShare, nearly 60 percent of desktop users access the Internet with a version of Internet Explorer. Many of these users are operating on enterprise networks, which could have exposed those networks to the vulnerabilities.

Full details of the 21 zero-day vulnerabilities can be found in the Microsoft Security Bulletin and the Palo Alto Networks blog.

 

Palo Alto Networks Threat Research Team

Palo Alto Networks is committed to proactively discovering advanced attacks before they can compromise enterprise networks. Our threat intelligence team brings together veteran security researchers with a unique intelligence framework to discover the most critical vulnerabilities, exploits and unknown malware in commonly used software and applications. In addition to advising business on how to safeguard their critical intellectual property, our research team develops protections that prevent attacks for all Palo Alto Networks customers worldwide.

Palo Alto Networks is a member of the Microsoft Active Protections Program (MAPP), which ensures the timely, responsible disclosure of new vulnerabilities and allows security vendors to create protections for new vulnerabilities to ensure that customers are protected as soon as the vulnerabilities are announced publicly. The Palo Alto Networks threat intelligence team works directly with Microsoft to make sure users are protected.

 

About Palo Alto Networks

Palo Alto Networks is leading a new era in cybersecurity by protecting thousands of enterprise, government, and service provider networks from cyber threats.  Unlike fragmented legacy products, our security platform safely enables business operations and delivers protection based on what matters most in today's dynamic computing environments: applications, users, and content.  Find out more at www.paloaltonetworks.com.

Palo Alto Networks and the Palo Alto Networks Logo are trademarks of Palo Alto Networks, Inc. in the United States and in jurisdictions throughout the world. All other trademarks, trade names or service marks used or mentioned herein belong to their respective owners.

 

Media Contacts

Jennifer Jasper-Smith
Head of Corporate Communications
Palo Alto Networks
408-638-3280
jjsmith@paloaltonetworks.com

Tim Whitman
Voce Communications
617-897-8255
twhitman@vocecomm.com