Palo Alto Networks PAN-OS command injection
Unauthenticated attackers can execute code with root privileges on GlobalProtect. This is already in CISA’s Known Exploited catalog.
CISA: Apply vendor mitigations or discontinue use until patched.
For CIOs, CTOs, and cyber-aware founders
Add the SaaS tools that hold your data. ZeroDayTracker watches those vendors, and the suppliers behind them, as AI-speed exploits shrink the time you have to respond.
Unauthenticated attackers can execute code with root privileges on GlobalProtect. This is already in CISA’s Known Exploited catalog.
CISA: Apply vendor mitigations or discontinue use until patched.
You already know which tools hold customer data, source code, and identity. Name them. We do the watching.
Pick from a curated catalog — Okta, Slack, Salesforce, M365, GitHub, and eighty more. Not a blank text box.
Direct hits on those vendors, plus the cloud, identity, and parent companies behind them. Signal from CISA KEV and critical NVD CVEs — not every CVE on the internet.
Severity, the CVE, which of your tools is exposed, and CISA’s required action. Daily or weekly digest on Keep Track.
Recorded Future and Mandiant are six figures. This is a watchtower for companies that live in SaaS and do not have a threat-intel desk.
No network access, no SSO dump, no endpoint agent. You type the tools. That is the whole integration.
CISA’s Known Exploited Vulnerabilities catalog is the primary feed. If it is being used in the wild, it shows up here.
Slack runs on AWS. GitHub is Microsoft. Auth0 is Okta. When the vendor behind your vendor is hit, Keep Track says so.
Start free. Upgrade when the blast radius matters.
Free
Keep Track
No. You name the tools. We never connect to your environment.
CISA’s Known Exploited Vulnerabilities catalog and the National Vulnerability Database, matched against a curated SaaS catalog and a hand-built supplier graph. We do not scrape Twitter.
If you track Slack and AWS is exploited, you see it as a supplier match. Free accounts only see incidents that name a tool you listed.
Yes. Stripe Customer Portal handles cards, invoices, and cancellation. Access stays through the paid period.