Fortinet VPN design flaw hides successful brute-force attacks
2 days ago · A design flaw in the Fortinet VPN server's logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off …
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
5 days ago · Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw …
Nov 16, 2024 · A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet's FortiClient for Windows to extract VPN credentials as part of a modular framework …
Chinese APT exploited unpatched Fortinet zero-day flaw
5 days ago · Threat intelligence vendor Volexity published research Friday that referenced a new zero-day vulnerability-- one without a current CVE designation -- that has enabled a Chinese …
Update now — Fortinet Windows VPN hacked to steal user data
4 days ago · Cybersecurity researchers has revealed that for months now, Fortinet’s Windows VPN client has been vulnerable to a flaw which allows threat actors to steal user credentials - …
High-severity Fortinet VPN flaw allows privilege escalation
Nov 14, 2024 · Fortinet patched the hole on Tuesday, so if you haven't already, upgrade to a fixed release. Pentera Labs' bug hunter Nir Chako found and reported the flaw to Fortinet, plus a …
China state hackers infected 20,000 Fortinet VPNs, Dutch spy …
Jun 11, 2024 · Hackers working for the Chinese government gained access to more than 20,000 VPN appliances sold by Fortinet using a critical vulnerability that the company failed to …
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
Feb 8, 2024 · Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under …
Feb 9, 2024 · Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild. The vulnerability, CVE-2024-21762 (CVSS score: 9.6), allows …
Fortinet Ships Emergency Patch for Already-Exploited VPN Flaw
Dec 12, 2022 · Fortinet issues an emergency patch to cover a critical-level vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the flaw in the wild.