#forticloud-sso

#forticloud-sso

Fortinet confirms active exploitation bypassing FortiCloud SSO patches on fully-patched FortiGate devices, enabling unauthenticated SSO bypass, persistence creation, VPN access changes, and configuration exfiltration.

Attackers have found a new way to bypass Fortinet's December patch for FortiCloud SSO, enabling compromise of updated FortiGate devices and exfiltration of configurations.