Vulnerabilities
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Fortinet"
Vulnerabilities
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Malware & Threats
Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access.
Vulnerabilities
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
Malware & Threats
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools.
Malware & Threats
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.
Network Security
The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.
Funding/M&A
Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and agentic systems.
Vulnerabilities
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Vulnerabilities
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.
Network Security
Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware attacks by the INC and Lynx operations.
Cybercrime
Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.
Network Security
A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Vulnerabilities
SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking.
Vulnerabilities
Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.
Vulnerabilities
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
Vulnerabilities
The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.
Network Security
The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests.
Malware & Threats
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
Malware & Threats
Data Breaches
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
Mobile & Wireless
