Fortinet VPN design flaw hides successful brute-force attacks
2 days ago · A design flaw in the Fortinet VPN server's logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off defenders of ...
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
5 days ago · Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw …
Nov 16, 2024 · A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet's FortiClient for Windows to extract VPN credentials as part of a modular framework called DEEPDATA.. Volexity, which disclosed the findings Friday, said it identified the zero-day exploitation of the credential disclosure vulnerability in July 2024, describing BrazenBamboo as the developer behind ...
High-severity Fortinet VPN flaw allows privilege escalation
Nov 14, 2024 · Fortinet patched the hole on Tuesday, so if you haven't already, upgrade to a fixed release. Pentera Labs' bug hunter Nir Chako found and reported the flaw to Fortinet, plus a second security oversight that allows someone or something nefarious on a system running the VPN client to alter SYSTEM-level registry keys that would otherwise be off ...
Newsroom | Fortinet News Releases
Nov 11, 2024 · Read the latest Fortinet press releases, blogs, and news articles for the latest updates and announcements.
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
Feb 8, 2024 · Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.
CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN …
Feb 9, 2024 · Fortinet warns of “potentially” exploited flaw in the SSL VPN functionality of FortiOS, as government agencies warn of pre-positioning by Chinese state-sponsored threat actors in U.S. critical infrastructure through exploitation of known vulnerabilities.
China state hackers infected 20,000 Fortinet VPNs, Dutch spy …
Jun 11, 2024 · Hackers working for the Chinese government gained access to more than 20,000 VPN appliances sold by Fortinet using a critical vulnerability that the company failed to disclose for two weeks...
Fortinet says hackers exploited critical vulnerability to infect VPN ...
Jan 12, 2023 · Remote code-execution bug was exploited to backdoor vulnerable servers. An unknown threat actor abused a critical vulnerability in Fortinet’s FortiOS SSL-VPN to infect government and...
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under …
Feb 9, 2024 · Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild. The vulnerability, CVE-2024-21762 (CVSS score: 9.6), allows for the execution of arbitrary code and commands.