Fortinet VPN design flaw hides successful brute-force attacks
2 days ago · A design flaw in the Fortinet VPN server's logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off …
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
5 days ago · Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw …
Nov 16, 2024 · A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet's FortiClient for Windows to extract VPN credentials as part of a modular framework …
High-severity Fortinet VPN flaw allows privilege escalation
Nov 14, 2024 · Fortinet patched the hole on Tuesday, so if you haven't already, upgrade to a fixed release. Pentera Labs' bug hunter Nir Chako found and reported the flaw to Fortinet, plus a …
Newsroom | Fortinet News Releases
Nov 11, 2024 · Read the latest Fortinet press releases, blogs, and news articles for the latest updates and announcements.
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
Feb 8, 2024 · Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.
CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN …
Feb 9, 2024 · Fortinet warns of “potentially” exploited flaw in the SSL VPN functionality of FortiOS, as government agencies warn of pre-positioning by Chinese state-sponsored threat actors in …
China state hackers infected 20,000 Fortinet VPNs, Dutch spy …
Jun 11, 2024 · Hackers working for the Chinese government gained access to more than 20,000 VPN appliances sold by Fortinet using a critical vulnerability that the company failed to …
Fortinet says hackers exploited critical vulnerability to infect VPN ...
Jan 12, 2023 · Remote code-execution bug was exploited to backdoor vulnerable servers. An unknown threat actor abused a critical vulnerability in Fortinet’s FortiOS SSL-VPN to infect …
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under …
Feb 9, 2024 · Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild. The vulnerability, CVE-2024-21762 (CVSS score: 9.6), allows …