Social 📸 Photography

Christoffer S.<a href="https://swecyb.com/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://swecyb.com/tags/SSL" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSL</a> <a href="https://swecyb.com/tags/GreyNoise" class="mention hashtag" rel="nofollow noopener" target="_blank">#GreyNoise</a> <a href="https://swecyb.com/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://swecyb.com/tags/NotYet" class="mention hashtag" rel="nofollow noopener" target="_blank">#NotYet</a>

Uwe CaspariBald ist wieder <a href="https://dudo.social/tags/itsa" class="mention hashtag" rel="nofollow noopener" target="_blank">#itsa</a>. Anfang Oktober trifft man sich wie in jedem Jahr in <a href="https://dudo.social/tags/N%C3%BCrnberg" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nürnberg</a> auf dem Messegelände, um sich zum Thema <a href="https://dudo.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> auszutauschen.<a href="https://dudo.social/tags/FORTINET" class="mention hashtag" rel="nofollow noopener" target="_blank">#FORTINET</a> ist natürlich mit dabei, inklusive einer Ausstellung unserer wunderschönen Ruggedized-Gerätelandschaft.Ich bin nicht die ganze Woche vor Ort, vermutlich nur am ersten Tag, also wer mal hallo sagen möchte, komm Dienstags vorbei. ;-)Noch kein Ticket? Dann gerne hier entlang: <a href="https://events.fortinet.com/it-sa2025" rel="nofollow noopener" translate="no" target="_blank">https://events.fortinet.com/it-sa2025</a><a href="https://dudo.social/tags/OT" class="mention hashtag" rel="nofollow noopener" target="_blank">#OT</a> <a href="https://dudo.social/tags/IndustrialSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#IndustrialSecurity</a> <a href="https://dudo.social/tags/KRITIS" class="mention hashtag" rel="nofollow noopener" target="_blank">#KRITIS</a>

The New OilNew <a href="https://mastodon.thenewoil.org/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://mastodon.thenewoil.org/tags/FortiWeb" class="mention hashtag" rel="nofollow noopener" target="_blank">#FortiWeb</a> hacks likely linked to public RCE exploits<a href="https://www.bleepingcomputer.com/news/security/new-fortinet-fortiweb-hacks-likely-linked-to-public-rce-exploits/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/new-fortinet-fortiweb-hacks-likely-linked-to-public-rce-exploits/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Dark Web Informer - Cyber Threat Intelligence :verified_paw: :verified_dragon:Fact <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a>

Tim (Wadhwa-)Brown :donor:New PoC dropped:<a href="https://github.com/0xbigshaq/CVE-2025-25257" rel="nofollow noopener" translate="no" target="_blank">https://github.com/0xbigshaq/CVE-2025-25257</a><a href="https://infosec.exchange/tags/threatintel" class="mention hashtag" rel="nofollow noopener" target="_blank">#threatintel</a>, <a href="https://infosec.exchange/tags/fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#fortinet</a>

The New OilExploits for pre-auth <a href="https://mastodon.thenewoil.org/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://mastodon.thenewoil.org/tags/FortiWeb" class="mention hashtag" rel="nofollow noopener" target="_blank">#FortiWeb</a> RCE flaw released, patch now<a href="https://www.bleepingcomputer.com/news/security/exploits-for-pre-auth-fortinet-fortiweb-rce-flaw-released-patch-now/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/exploits-for-pre-auth-fortinet-fortiweb-rce-flaw-released-patch-now/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

The New OilCritical <a href="https://mastodon.thenewoil.org/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> flaws now exploited in <a href="https://mastodon.thenewoil.org/tags/Qilin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Qilin</a> <a href="https://mastodon.thenewoil.org/tags/ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#ransomware</a> attacks<a href="https://www.bleepingcomputer.com/news/security/critical-fortinet-flaws-now-exploited-in-qilin-ransomware-attacks/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/critical-fortinet-flaws-now-exploited-in-qilin-ransomware-attacks/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

k3ym𖺀🚨 New Threat Alert: FormBook is back — and it’s stealthier than ever.<a href="https://infosec.exchange/@FortiGuardLabs" class="u-url mention" rel="nofollow noopener" target="_blank">@FortiGuardLabs</a> has uncovered a new phishing campaign that spreads FormBook, a potent <a href="https://infosec.exchange/tags/infostealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#infostealer</a> malware targeting your credentials, screenshots, and more.📥 Lures victims with spoofed job applications 🎯 Designed to evade detection 🕵️‍♀️ Highly active in the wildDon’t get caught off guard.🔍 Dive into the full technical breakdown and see how to defend your org ➡️ <a href="https://www.fortinet.com/blog/threat-research/infostealer-malware-formbook-spread-via-phishing-campaign" rel="nofollow noopener" translate="no" target="_blank">https://www.fortinet.com/blog/threat-research/infostealer-malware-formbook-spread-via-phishing-campaign</a><a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatIntel</a> <a href="https://infosec.exchange/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Phishing</a> <a href="https://infosec.exchange/tags/InfoStealer" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoStealer</a> <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/SecurityOperations" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityOperations</a> <a href="https://infosec.exchange/tags/CyberThreats" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberThreats</a>

The New OilData-stealing <a href="https://mastodon.thenewoil.org/tags/Chrome" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chrome</a> extensions impersonate <a href="https://mastodon.thenewoil.org/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a>, <a href="https://mastodon.thenewoil.org/tags/YouTube" class="mention hashtag" rel="nofollow noopener" target="_blank">#YouTube</a>, VPNs<a href="https://www.bleepingcomputer.com/news/security/data-stealing-chrome-extensions-impersonate-fortinet-youtube-vpns/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/data-stealing-chrome-extensions-impersonate-fortinet-youtube-vpns/</a><a href="https://mastodon.thenewoil.org/tags/VPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#VPN</a> <a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

computing competence<a href="https://feinste-netzwerke.de?t=wochenbericht" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wochenbericht</a> KW19: - Mo: <a href="https://feinste-netzwerke.de?t=3cx" class="mention hashtag" rel="nofollow noopener" target="_blank">#3CX</a> Einstellungen, Upgrade von <a href="https://feinste-netzwerke.de?t=smarttime" class="mention hashtag" rel="nofollow noopener" target="_blank">#SmartTime</a> Datenbank. Stromausfall eines <a href="https://feinste-netzwerke.de?t=unifi" class="mention hashtag" rel="nofollow noopener" target="_blank">#Unifi</a> Netzwerks. Alles wieder gut. - Di: Installation eine <a href="https://feinste-netzwerke.de?t=oauthproxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#OauthProxy</a> unter <a href="https://feinste-netzwerke.de?t=debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Debian</a>. Evaluierung des transparenten <a href="https://feinste-netzwerke.de?t=proxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxy</a> in einer <a href="https://feinste-netzwerke.de?t=watchguard" class="mention hashtag" rel="nofollow noopener" target="_blank">#Watchguard</a> für eine kommende Migration weg von <a href="https://feinste-netzwerke.de?t=sophos" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sophos</a> - Mi: Aufbau einer <a href="https://feinste-netzwerke.de?t=3cx" class="mention hashtag" rel="nofollow noopener" target="_blank">#3CX</a> <a href="https://feinste-netzwerke.de?t=telefonanlage" class="mention hashtag" rel="nofollow noopener" target="_blank">#Telefonanlage</a>. Einrichtung eines transparenten <a href="https://feinste-netzwerke.de?t=proxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxy</a> auf einer <a href="https://feinste-netzwerke.de?t=opnsense" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPNSense</a> inkl. <a href="https://feinste-netzwerke.de?t=acme" class="mention hashtag" rel="nofollow noopener" target="_blank">#ACME</a> Zertifikatsverwaltung nicht nur für HTTP, sondern auch SMTP und IMAP auf einen <a href="https://feinste-netzwerke.de?t=groupoffice" class="mention hashtag" rel="nofollow noopener" target="_blank">#GroupOffice</a> Server - Do: Bürotag, Kleinigkeiten. Eine <a href="https://feinste-netzwerke.de?t=3cx" class="mention hashtag" rel="nofollow noopener" target="_blank">#3CX</a> leidete unter einer schlechten <a href="https://feinste-netzwerke.de?t=fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> Firewall. Reboot tut gut. Entstörung E-Mail Versand in einer Praxis - Fr: <a href="https://lfnt.site/users/oliver" class="u-url mention" rel="nofollow noopener" target="_blank">@oliver@lfnt.site</a> installiert die Basis für neander.social . Mal gucken wie weit wir mit <a href="https://feinste-netzwerke.de?t=freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> kommen. Sonst <a href="https://feinste-netzwerke.de?t=orga" class="mention hashtag" rel="nofollow noopener" target="_blank">#Orga</a> und <a href="https://feinste-netzwerke.de?t=abrechnungen" class="mention hashtag" rel="nofollow noopener" target="_blank">#Abrechnungen</a>. <a href="https://feinste-netzwerke.de?t=teammeeting" class="mention hashtag" rel="nofollow noopener" target="_blank">#Teammeeting</a> Highlight: <a href="https://chaos.social/users/besendorf" class="u-url mention" rel="nofollow noopener" target="_blank">@besendorf@chaos.social</a> testet den Umstieg von <a href="https://feinste-netzwerke.de?t=gitea" class="mention hashtag" rel="nofollow noopener" target="_blank">#gitea</a> auf <a href="https://feinste-netzwerke.de?t=forgejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#forgejo</a>. Sieht gut aus!

Alexandre DulaunoyWhile digging into some <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> vulnerabilities, I discovered a set of CVEs that were rejected for being unused.I'm wondering how this is actually helping vulnerability management. Does this mean those will be never used? or something else?<a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://infosec.exchange/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> <a href="https://infosec.exchange/tags/vulnerabilities" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerabilities</a> 🔗 <a href="https://vulnerability.circl.lu/vuln/cve-2025-46221" rel="nofollow noopener" translate="no" target="_blank">https://vulnerability.circl.lu/vuln/cve-2025-46221</a>

:mastodon: decioSi tu gères un firewall <a href="https://infosec.exchange/tags/Fortigate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortigate</a> (ou tu connais quelqu’un qui en administre un) avec SSL-VPN activé, prends 2 min pour vérifier s’il est compromis.Depuis les attaques massives de 2024, des cybercriminels laissent des liens symboliques planqués dans les fichiers de langue. Résultat : même après patch, ils gardent accès au système.👉 Plus de 16 000 appareils compromis dans le monde, dont 208 en Suisse (source : Shadowserver).Fortinet a publié un correctif + une signature AV/IPS pour nettoyer, mais faut mettre à jour. 👇 <a href="https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity" rel="nofollow noopener" translate="no" target="_blank">https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity</a> ⬇️ [dans les news] <a href="https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/</a>📊 ⬇️ <a href="https://dashboard.shadowserver.org/statistics/combined/tree/?day=2025-04-11&source=compromised_website&source=compromised_website6&tag=fortinet-compromised%2B&geo=all&data_set=count&scale=log" rel="nofollow noopener" translate="no" target="_blank">https://dashboard.shadowserver.org/statistics/combined/tree/?day=2025-04-11&source=compromised_website&source=compromised_website6&tag=fortinet-compromised%2B&geo=all&data_set=count&scale=log</a>💡 Et pour rappel : si vous administrez pour une entreprise, institution ou toute entité titulaire d’un AS ou de plages IP définies, vous pouvez recevoir des alertes directes de la fondation <a href="https://infosec.exchange/@shadowserver" class="u-url mention" rel="nofollow noopener" target="_blank">@shadowserver</a> si un de vos équipements en frontière est détecté comme compromis. ⬇️ Inscription ici : <a href="https://www.shadowserver.org/what-we-do/network-reporting/get-reports/" rel="nofollow noopener" translate="no" target="_blank">https://www.shadowserver.org/what-we-do/network-reporting/get-reports/</a><a href="https://infosec.exchange/tags/CyberVeille" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberVeille</a> <a href="https://infosec.exchange/tags/Suisse" class="mention hashtag" rel="nofollow noopener" target="_blank">#Suisse</a> <a href="https://infosec.exchange/tags/fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#fortinet</a> <a href="https://infosec.exchange/tags/vulnerable" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerable</a>

AI6YR BenLOL FortinetBleepingComputer: Over 16,000 Fortinet devices compromised with symlink backdoor<a href="https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/</a><a href="https://m.ai6yr.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://m.ai6yr.org/tags/fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#fortinet</a>

LMG SecurityFortinet Alert: Hackers Maintain Access to Patched FortiGate VPNs via Symlinks.Hackers are using a new post-exploitation technique to maintain access to FortiGate VPN devices, even after vulnerabilities have been patched. Fortinet has warned that threat actors are leveraging symlinks (symbolic links) to retain read-only access to compromised devices, even after the original attack vector was closed. The malicious actors used older vulnerabilities to create symlinks in the SSL-VPN folder, allowing them to keep access to the root filesystem undetected. What should you do?▪ Upgrade your FortiOS to the latest version ▪ Review device configurations for any unexpected changes. ▪ Reset all credentials and secret keys on potentially compromised devices. ▪ Isolate affected VPN devices from your network to prevent lateral movement.Read more details: <a href="https://www.bleepingcomputer.com/news/security/fortinet-hackers-retain-access-to-patched-fortigate-vpns-using-symlinks/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/fortinet-hackers-retain-access-to-patched-fortigate-vpns-using-symlinks/</a><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://infosec.exchange/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a>

DFN-CERTCERT.at investigates ransomware attacks via critical Fortinet vulnerabilities (FortiOS, FortiProxy) and recommends urgent forensic investigations of all devices that didn't have FortiOS 7.0.16 installed before 2025-01-27, when the PoC for CVE-2024-55591 was published. Those devices may be compromised despite having been patched later.Check (German) warning by <a href="https://ioc.exchange/@CERT_at" class="u-url mention" rel="nofollow noopener" target="_blank">@CERT_at</a> <a href="https://www.cert.at/de/warnungen/2025/3/ransomware-gruppen-nutzen-weiterhin-kritische-fortinet-schwachstellen-warnung-vor-gepatchten-aber-bereits-kompromittierten-geraten" rel="nofollow noopener" translate="no" target="_blank">https://www.cert.at/de/warnungen/2025/3/ransomware-gruppen-nutzen-weiterhin-kritische-fortinet-schwachstellen-warnung-vor-gepatchten-aber-bereits-kompromittierten-geraten</a>Long story with Forescout: <a href="https://www.forescout.com/blog/new-ransomware-operator-exploits-fortinet-vulnerability-duo/" rel="nofollow noopener" translate="no" target="_blank">https://www.forescout.com/blog/new-ransomware-operator-exploits-fortinet-vulnerability-duo/</a><a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#fortinet</a> <a href="https://infosec.exchange/tags/Mora_001" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mora_001</a>

CedricConsole Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on <a href="https://fosstodon.org/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://fosstodon.org/tags/FortiGate" class="mention hashtag" rel="nofollow noopener" target="_blank">#FortiGate</a> Firewalls - Arctic Wolf<a href="https://vulnerability.circl.lu/bundle/9a35bcae-d831-491f-945c-1fbd54769c38" rel="nofollow noopener" translate="no" target="_blank">https://vulnerability.circl.lu/bundle/9a35bcae-d831-491f-945c-1fbd54769c38</a>CVE-2024-55591 CVE-2022-26118<a href="https://fosstodon.org/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://fosstodon.org/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> <a href="https://fosstodon.org/tags/fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#fortinet</a> <a href="https://fosstodon.org/tags/VulnerabilityLookup" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityLookup</a>

BSI‼️📢 Heute veröffentlichte <a href="https://social.bund.de/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> ein Advisory zu einer <a href="https://social.bund.de/tags/Schwachstelle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Schwachstelle</a> in Fortiproxy und FortiOS, dem Betriebssystem welches u.a. auf der Firewall-Produktreihe FortiGate zum Einsatz kommt. Die Schwachstelle wurde nach dem Common Vulnerability Scoring System mit 9.6 ("kritisch") bewertet und erlaubt es einem nicht-authentifizierten Angreifer Super-Admin Privilegien zu erlangen. Es handelt sich um einen Authentication Bypass über einen alternativen Pfad. Mehr dazu: 👉 <a href="https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2025/2025-213432-1032" rel="nofollow noopener" translate="no" target="_blank">https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2025/2025-213432-1032</a>

LMG SecurityA new Fortinet VPN zero-day vulnerability is being exploited by a toolkit called 'DeepData'. The <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> gap allows credential dumping from memory after authentication. Until a patch is available, you should restrict VPN access and monitor for unusual login activity. IOCs are available in this article: <a href="https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/</a><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/ZeroDay" class="mention hashtag" rel="nofollow noopener" target="_blank">#ZeroDay</a> <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://infosec.exchange/tags/ThreatIntel" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatIntel</a> <a href="https://infosec.exchange/tags/CredentialTheft" class="mention hashtag" rel="nofollow noopener" target="_blank">#CredentialTheft</a> <a href="https://infosec.exchange/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://infosec.exchange/tags/Databreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#Databreach</a> <a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener" target="_blank">#DFIR</a>

LMG SecurityA critical <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> flaw, <a href="https://infosec.exchange/tags/FortiJump" class="mention hashtag" rel="nofollow noopener" target="_blank">#FortiJump</a>, is being actively exploited in FortiManager. This vulnerability can allow remote attackers to execute code or commands without authentication. Fortinet has released workarounds. Read more: <a href="https://thehackernews.com/2024/10/fortinet-warns-of-critical.html" rel="nofollow noopener" translate="no" target="_blank">https://thehackernews.com/2024/10/fortinet-warns-of-critical.html</a><a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> <a href="https://infosec.exchange/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vulnerability</a> <a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener" target="_blank">#DFIR</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a>

the magnificent rhysI'm hating how much of my life is dominated by <a href="https://mastodon.rhys.wtf/tags/Fortinet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fortinet</a> right now.It's gotten a bit easier now some media outlets are reporting on it, mainly based on <a href="https://cyberplace.social/@GossiTheDog" class="u-url mention" rel="nofollow noopener" target="_blank">@GossiTheDog</a>'s toots, but good grief, what a mess.On the plus side, it's encouraging my place to finally start taking vendor assessment and how we architecturally position vendor appliances a bit more seriously.

Recent searches

Search options

Administered by:

Server stats:

#fortinet