Vulnerabilities Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system. Ionut ArghireNovember 19, 2025
Network Security Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its... Ionut ArghireNovember 14, 2025
Vulnerabilities High-Severity Vulnerabilities Patched by Fortinet and Ivanti Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products. Eduard KovacsOctober 15, 2025
Malware & Threats Cisco, Fortinet, Palo Alto Networks Devices Targeted in Coordinated Campaign GreyNoise has discovered that attacks exploiting Cisco, Fortinet, and Palo Alto Networks vulnerabilities are launched from the same infrastructure. Ionut ArghireOctober 10, 2025
Vulnerabilities Fortinet, Ivanti, Nvidia Release Security Updates High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering. Ionut ArghireSeptember 10, 2025
Vulnerabilities Fortinet, Ivanti Release August 2025 Security Patches Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates. Eduard KovacsAugust 13, 2025
Vulnerabilities Fortinet FortiWeb Flaw Exploited in the Wild After PoC Publication Dozens of FortiWeb instances have been hacked after PoC targeting a recent critical vulnerability was shared publicly. Ionut ArghireJuly 18, 2025
Vulnerabilities Ivanti, Fortinet, Splunk Release Security Updates Ivanti, Fortinet, and Splunk have released patches for critical- and high-severity vulnerabilities in their products. Ionut ArghireJuly 9, 2025
Vulnerabilities Fortinet, Ivanti Patch High-Severity Vulnerabilities Patches released by Fortinet and Ivanti resolve over a dozen vulnerabilities, including high-severity flaws leading to code execution, credential leaks. Ionut ArghireJune 11, 2025
Vulnerabilities Fortinet Patches Zero-Day Exploited Against FortiVoice Appliances Fortinet has patched a dozen vulnerabilities, including a critical flaw exploited in the wild against FortiVoice instances. Ionut ArghireMay 14, 2025
Data Breaches Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices. Ryan NaraineApril 24, 2025
Malware & Threats Threat Actor Allegedly Selling Fortinet Firewall Zero-Day Exploit A threat actor claims to offer a zero-day exploit for an unauthenticated remote code execution vulnerability in Fortinet firewalls. Ionut ArghireApril 14, 2025
Vulnerabilities Fortinet Patches Critical FortiSwitch Vulnerability Fortinet fixes a critical-severity bug in FortiSwitch that could allow an attacker to modify administrative passwords. Ionut ArghireApril 9, 2025
Vulnerabilities Fortinet Patches 18 Vulnerabilities Fortinet has published 17 new advisories to inform customers about 18 vulnerabilities patched in its products. Eduard KovacsMarch 12, 2025
Vulnerabilities Ivanti, Fortinet Patch Remote Code Execution Vulnerabilities Ivanti and Fortinet on Tuesday released patches for multiple critical- and high-severity vulnerabilities in their products. Ionut ArghireFebruary 12, 2025
Data Breaches Data From 15,000 Fortinet Firewalls Leaked by Hackers Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684. Eduard KovacsJanuary 16, 2025
Vulnerabilities Fortinet Confirms New Zero-Day Exploitation Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024. Eduard KovacsJanuary 15, 2025
Vulnerabilities Fortinet Patches Critical FortiWLM Vulnerability Fortinet has released patches for a critical-severity path traversal vulnerability in FortiWLM that was reported last year. Ionut ArghireDecember 19, 2024
Funding/M&A Fortinet Acquires Perception Point Reportedly for $100 Million Fortinet has acquired Israeli collaboration and email security company Perception Point to expand its offering. Eduard KovacsDecember 12, 2024
Malware & Threats Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched. Ionut ArghireNovember 18, 2024