#fortinet
#fortinet
[ follow ]
#cybersecurity #vulnerability #forticlient-ems #sase #forticloud-sso #vulnerabilities #zero-day #fortisandbox
fromSecurityWeek
2 months agoDefault ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities
Poland's computer emergency response team (CERT) has published a report detailing the recent attack by Russia-linked hackers on the country's power grid. The attack targeted communication and control systems at roughly 30 sites, including combined heat and power (CHP) plants and renewable energy dispatch centers for wind and solar facilities. The hackers gained access to industrial control systems (ICS), but primarily targeted grid safety and stability monitoring systems rather than active power generation systems.
Information security
Information security
fromThe Hacker News
3 months agoAutomated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations
Automated attackers exploit Fortinet SSO vulnerabilities (CVE-2025-59718, CVE-2025-59719) to create accounts, enable VPN access, and exfiltrate firewall configurations.
Information security
fromComputerWeekly.com
4 months agoFortinet vulnerabilities prompt pre-holiday warnings | Computer Weekly
Two Fortinet SAML vulnerabilities allow bypassing FortiCloud SSO, enabling admin access and potential credential exposure across multiple Fortinet products; patches and mitigations available.
Information security
fromThe Hacker News
4 months agoFortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws
Critical authentication-bypass and code-execution vulnerabilities fixed in Fortinet, Ivanti, and SAP products, including Fortinet SAML signature verification and Ivanti Endpoint Manager stored XSS.
Information security
fromThe Hacker News
5 months agoWeekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More
Attackers exploited trusted tools and features, including a Fortinet FortiWeb WAF flaw (CVE-2025-64446), enabling stealthy administrative account creation and wide impact.
fromDatabreaches
9 months agoQilin Emerged as The Most Active Group, Exploiting Unpatched Fortinet Vulnerabilities
The ransomware landscape witnessed a dramatic shift in June 2025 as the Qilin ransomware group surged to become the most active threat actor, recording 81 victims and representing a staggering 47.3% increase in activity compared to previous months.
Privacy professionals
[ Load more ]