Experimental News Clipping Site

Tag: Fortinet

  • Alerts: Fortinet Releases Security Updates for Multiple Products

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/fortinet-releases-security-updates-multiple-products Source: Alerts Title: Fortinet Releases Security Updates for Multiple Products Feedly Summary: Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/14/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability CVE-2025-21334 Microsoft Windows Hyper-V NT…

  • The Register: Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/14/miscreants_mass_exploited_fortinet_firewalls/ Source: The Register Title: Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used Feedly Summary: Ransomware ‘not off the table,’ Arctic Wolf threat hunter tells El Reg Miscreants running a “mass exploitation campaign" against Fortinet firewalls, which peaked in December, may be using an unpatched zero-day vulnerability to compromise the equipment, according…

  • The Register: Charter, Consolidated, Windstream reportedly join Salt Typhoon victim list

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/06/charter_consolidated_windstream_salt_typhoon/ Source: The Register Title: Charter, Consolidated, Windstream reportedly join Salt Typhoon victim list Feedly Summary: The slow drip of compromised telecom networks continues The list of telecommunications victims in the Salt Typhoon cyberattack continues to grow as a new report names Charter Communications, Consolidated Communications, and Windstream among those breached by Chinese…

  • Alerts: Fortinet Releases Security Updates for FortiManager

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/12/20/fortinet-releases-security-updates-fortimanager Source: Alerts Title: Fortinet Releases Security Updates for FortiManager Feedly Summary: Fortinet released a security update to address a vulnerability in FortiManager. A remote cyber threat actor could exploit this vulnerability to take control of an affected system. Users and administrators are encouraged to review the following Fortinet Security Bulletin and apply…

  • The Register: Salt Typhoon’s surge extends far beyond US telcos

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/27/salt_typhoons_us_telcos/ Source: The Register Title: Salt Typhoon’s surge extends far beyond US telcos Feedly Summary: Plus, a brand-new backdoor, GhostSpider, is linked to the cyber-spy crew’s operations The reach of the China-linked Salt Typhoon gang extends beyond American telecommunications giants, and its arsenal includes several backdoors, including a brand-new malware dubbed GhostSpider, according…

  • The Register: China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/china_brazenbamboo_fortinet_0day/ Source: The Register Title: China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer Feedly Summary: No word on when or if the issue will be fixed Chinese government-linked snoops are exploiting a zero-day bug in Fortinet’s Windows VPN client to steal credentials and other information, according to memory forensics outfit Volexity.… AI…

  • The Register: Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/14/fortinet_vpn_authentication_bypass_bug/ Source: The Register Title: Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost Feedly Summary: Plus a bonus hard-coded local API key A now-patched, high-severity bug in Fortinet’s FortiClient VPN application potentially allows a low-privilege rogue user or malware on a vulnerable Windows system to gain higher…

  • The Register: Five Eyes infosec agencies list 2024’s most exploited software flaws

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/14/five_eyes_2024_top_vulnerabilities/ Source: The Register Title: Five Eyes infosec agencies list 2024’s most exploited software flaws Feedly Summary: Slack patching remains a problem – which is worrying as crooks increasingly target zero-day vulns The cyber security agencies of the UK, US, Canada, Australia, and New Zealand have issued their annual list of the 15…

  • Alerts: Fortinet Releases Security Updates for Multiple Products

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/fortinet-releases-security-updates-multiple-products Source: Alerts Title: Fortinet Releases Security Updates for Multiple Products Feedly Summary: Fortinet has released security updates to address vulnerabilities in multiple products, including FortiOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories…