News

Fortinet VPNs under attack from potential zero-day - FortiSIEM security tools also at risk, so be on your guard

In early August 2025, researchers from GreyNoise first observed a significant spike in brute-force attacks against Fortinet ...

Spike in Fortinet VPN brute-force attacks raises zero-day concerns

A massive spike in brute-force attacks targeted Fortinet SSL VPNs earlier this month, followed by a switch to FortiManager, ...

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

An unauthenticated attacker can abuse this flaw by crafting a CLI request and then executing arbitrary commands on the ...
Infosecurity Magazine14h

Fortinet Warns Exploit Code Available for Critical Vulnerability

Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit ...

Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

Fortinet is warning about a remote unauthenticated command injection flaw in FortiSIEM that has in-the-wild exploit code, ...
Style de star on MSN7d

Research Links Threat Actor Activity to Future Vulnerabilities

Spikes in attacker activity often precede new cyber vulnerabilities. In 80 percent of cases we analyzed, significant spikes ...
The Hacker News2d

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Coordinated brute-force attacks hit Fortinet SSL VPNs and FortiManager, involving 780+ malicious IPs from U.S., Canada, ...
Fudzilla7d

Thousands of ASUS routers backdoored without malware

GreyNoise and Sekoia warn  Thousands of ASUS routers have been  compromised with persistent backdoors in what appears to be a ...
The Hacker News1d

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ...
Infosecurity Magazine13d

Hackers Regularly Exploit Vulnerabilities Before Public Disclosure, Study Finds

Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report ...
Computer Weekly7dOpinion

Diversity Think Tank: Stepping back? A look at DEI in the current climate

Even without recent news in the US, diversity, equity and inclusion (DEI) initiatives were dialled back in UK businesses last ...
The Strategist14d

The hidden cost and quiet vulnerabilities of cheap routers

While headlines warn about the risks of dodgy e-commerce and questionable supply chains, a quieter vulnerability has taken ...