Vulnerabilities
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Fortinet"
Network Security
Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware attacks by the INC and Lynx operations.
Cybercrime
Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.
Network Security
A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Vulnerabilities
SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking.
Vulnerabilities
Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.
Vulnerabilities
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
Vulnerabilities
The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.
Network Security
The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests.
Vulnerabilities
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
Vulnerabilities
The bugs could be exploited without authentication for command execution and authentication bypass.
Vulnerabilities
Tracked as CVE-2026-24858, the bug allows attackers to log into devices registered to other FortiCloud accounts.
Vulnerabilities
Similar to recent FortiCloud single sign-on (SSO) login vulnerabilities, the attacks bypass authentication.
Vulnerabilities
Hackers bypass the FortiCloud SSO login authentication to create new accounts and change device configurations.
Vulnerabilities
Exploitable without authentication, the two security defects could lead to configuration leak and code execution.
Vulnerabilities
Tracked as CVE-2020-12812, the exploited FortiOS flaw allows threat actors to bypass two-factor authentication.
Vulnerabilities
Threat actors are exploiting the two critical authentication bypass vulnerabilities against FortiGate appliances.
Vulnerabilities
The two security defects impact FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO login authentication enabled.
ICS/OT
Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Vulnerabilities
Mobile & Wireless
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations.
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
