News

Spike in Fortinet VPN brute-force attacks raises zero-day concerns

A massive spike in brute-force attacks targeted Fortinet SSL VPNs earlier this month, followed by a switch to FortiManager, ...

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

An unauthenticated attacker can abuse this flaw by crafting a CLI request and then executing arbitrary commands on the ...

Fortinet VPNs under attack from potential zero-day - FortiSIEM security tools also at risk, so be on your guard

In early August 2025, researchers from GreyNoise first observed a significant spike in brute-force attacks against Fortinet ...
Style de star on MSN12d

Research Links Threat Actor Activity to Future Vulnerabilities

Spikes in attacker activity often precede new cyber vulnerabilities. In 80 percent of cases we analyzed, significant spikes ...

Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

Fortinet is warning about a remote unauthenticated command injection flaw in FortiSIEM that has in-the-wild exploit code, ...
Fudzilla12d

Thousands of ASUS routers backdoored without malware

GreyNoise and Sekoia warn  Thousands of ASUS routers have been  compromised with persistent backdoors in what appears to be a ...
The Hacker News7d

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Coordinated brute-force attacks hit Fortinet SSL VPNs and FortiManager, involving 780+ malicious IPs from U.S., Canada, ...
Infosecurity Magazine5d

Fortinet Warns Exploit Code Available for Critical Vulnerability

Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit code is currently circulating in the wild. Published on Tuesday, ...
The Hacker News6d

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ...
Computer Weekly12dOpinion

Diversity Think Tank: Stepping back? A look at DEI in the current climate

Even without recent news in the US, diversity, equity and inclusion (DEI) initiatives were dialled back in UK businesses last ...
Infosecurity-magazine.com19d

Hackers Regularly Exploit Vulnerabilities Before Public Disclosure

Many hackers are opportunistic and often attempt to exploit security gaps to launch an attack days before a vulnerability is disclosed. According to a new report published on July 31 by GreyNoise, ...
CRN27d

10 Major Cyberattacks And Data Breaches In 2025 (So Far) - CRN

Major cyberattacks in 2025 so far have included the Microsoft SharePoint Server “ToolShell” attacks, the ransomware attack against IT distributor Ingram Micro and a series of Scattered Spider ...