Cyber CrimeFortiBleed Credential Theft Still Active, FBI Says
The FBI and Secret Service say the FortiBleed campaign remains active, with 86,644 Fortinet device credentials amassed across 194 countries.
> Search
11 results for “fortinet”
Cyber Crime
Cyber CrimeSmall Mistakes, Big Breaches This Week
Citrix and FortiMail zero-days, a new Spectre v2 variant, and a 16-year-old suspect top this week's threat roundup.
Cyber CrimeFortinet Zero-Day Hits FortiMail Gateways
Fortinet reports active exploitation of a critical FortiMail flaw, with patches still pending and CISA ordering federal fixes by October 4th.
Cyber CrimeCisco Email Gateway Flaw Under Attack
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
Cyber CrimeMeshCentral Backdoor Hid Inside 3BB Network
Hunt.io says an attacker used a legitimate remote-management tool to hold root access inside Thailand's 3BB and target subscriber credentials.
SecurityFortinet Critical Patches Target JWT Bypass and Browser Proxy
Fortinet patches two critical flaws: one bypassing FortiMonitorOnSight auth via JWT, another allowing browser traffic proxy.
SecurityFortinet's Patch Wave Targets Authentication Gaps
Fortinet resolves eight flaws, including high-severity authentication bugs in FortiWeb and FortiManager.
SecurityCISA Adds FortiSandbox Flaw to KEV List
Federal agencies must address a critical OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Warns of Active FortiSandbox Flaw
Federal agencies must address an actively exploited OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityPatching Enterprise Software Ecosystems
ServiceNow, Ivanti, and Fortinet address a wave of critical vulnerabilities, highlighting the ongoing strain on infrastructure security.