Fortinet - Security Ticks

Fortinet Patches Code Execution Vulnerability in FortiOS

Fortinet, Vulnerabilities / SecurityTicks

Fortinet Patches Code Execution Vulnerability in FortiOS 2024-06-12 at 19:46 By Ionut Arghire Fortinet has patched multiple vulnerabilities in FortiOS, including a high-severity code execution security flaw. The post Fortinet Patches Code Execution Vulnerability in FortiOS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this […]

React to this headline:

Fortinet Patches Code Execution Vulnerability in FortiOS Read More »

20,000 FortiGate appliances compromised by Chinese hackers

attacks, China, Don't miss, enterprise, Fortinet, Government, government-backed attacks, hardware, Hot stuff, Malware, News, Remote Access Trojan / SecurityTicks

20,000 FortiGate appliances compromised by Chinese hackers 2024-06-12 at 14:16 By Zeljka Zorz Coathanger – a piece of malware specifically built to persist on Fortinet’s FortiGate appliances – may still be lurking on too many devices deployed worldwide. How Coathanger persists on FortiGate devices In February 2024, the Dutch Military Intelligence and Security Service (MIVD)

React to this headline:

20,000 FortiGate appliances compromised by Chinese hackers Read More »

Fortinet Expands Cloud Security Portfolio with Lacework Acquisition

cloud security, CNAPP, DSPM, Featured, Fortinet, Funding/M&A, Lacework, M&A Tracker / SecurityTicks

Fortinet Expands Cloud Security Portfolio with Lacework Acquisition 2024-06-10 at 18:31 By Ryan Naraine Fortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion. The post Fortinet Expands Cloud Security Portfolio with Lacework Acquisition appeared first on SecurityWeek. This article is

React to this headline:

Fortinet Expands Cloud Security Portfolio with Lacework Acquisition Read More »

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)

CVE, Don't miss, enterprise, exploit, Fortinet, Horizon3.ai, Hot stuff, News, PoC, vulnerability / SecurityTicks

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992) 2024-05-29 at 13:01 By Zeljka Zorz Horizon3.ai researches have released proof-of-concept (PoC) exploits for CVE-2024-23108 and CVE-2023-34992, vulnerabilities that allow remote, unauthenticated command execution as root on certain Fortinet FortiSIEM appliances. CVE confusion FortiSIEM helps customers build an inventory of their organization’s assets, it

React to this headline:

PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992) Read More »

Cybercriminals are getting faster at exploiting vulnerabilities

cybercrime, cybersecurity, Fortinet, News, report, survey / SecurityTicks

Cybercriminals are getting faster at exploiting vulnerabilities 2024-05-10 at 08:01 By Help Net Security Cybercriminals are targeting the ever-increasing number of new vulnerabilities resulting from the exponential growth in the number and variety of connected devices and an explosion in new applications and online services, according to Fortinet. It’s only natural that attacks looking to

React to this headline:

Cybercriminals are getting faster at exploiting vulnerabilities Read More »

FortiGate 200G series boosts campus connectivity for Wi-Fi 7

Fortinet, Industry news / SecurityTicks

FortiGate 200G series boosts campus connectivity for Wi-Fi 7 2024-05-03 at 13:31 By Industry News Fortinet announced a new next-generation firewall (NGFW) appliance with the security and networking performance needed to serve as the backbone of the modern campus. Built on the Fortinet operating system, FortiOS, and the latest, fifth-generation Fortinet security processing unit (SP5),

React to this headline:

FortiGate 200G series boosts campus connectivity for Wi-Fi 7 Read More »

Fortinet Patches Critical RCE Vulnerability in FortiClientLinux

Fortinet, Vulnerabilities / SecurityTicks

Fortinet Patches Critical RCE Vulnerability in FortiClientLinux 2024-04-10 at 15:38 By Ionut Arghire Fortinet has released patches for a dozen vulnerabilities, including a critical-severity remote code execution flaw in FortiClientLinux. The post Fortinet Patches Critical RCE Vulnerability in FortiClientLinux appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Fortinet Patches Critical RCE Vulnerability in FortiClientLinux Read More »

Fortinet upgrades its real-time network security operating system

Fortinet, Industry news / SecurityTicks

Fortinet upgrades its real-time network security operating system 2024-04-02 at 17:02 By Industry News Fortinet announced the latest version of its FortiOS operating system and other major enhancements to the company’s cybersecurity platform, the Fortinet Security Fabric. FortiOS 7.6 empowers customers to better mitigate risk, reduce complexity, and realize a superior user experience across their

React to this headline:

Fortinet upgrades its real-time network security operating system Read More »

Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks

exploited, Featured, Fortinet, Ivanti, Vulnerabilities / SecurityTicks

Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks 2024-03-26 at 12:46 By Eduard Kovacs CVE-2023-48788, a critical SQL injection vulnerability in Fortinet’s FortiClient EMS product, is being exploited in the wild. The post Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks Read More »

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)

Don't miss, endpoint management, Fortinet, Horizon3.ai, Hot stuff, News, PoC, SANS ISC, vulnerability / SecurityTicks

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788) 2024-03-14 at 16:36 By Zeljka Zorz A recently fixed SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient Endpoint Management Server (EMS) solution has apparently piqued the interest of many: Horizon3’s Attack Team means to publish technical details and a proof-of-concept exploit for it next week, and

React to this headline:

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788) Read More »

Fortinet Patches Critical Vulnerabilities Leading to Code Execution

Fortinet, Vulnerabilities / SecurityTicks

Fortinet Patches Critical Vulnerabilities Leading to Code Execution 2024-03-13 at 12:33 By Ionut Arghire Fortinet has released patches for critical code execution vulnerabilities in FortiOS, FortiProxy, and FortiClientEMS. The post Fortinet Patches Critical Vulnerabilities Leading to Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Fortinet Patches Critical Vulnerabilities Leading to Code Execution Read More »

Windstream Enterprise and Fortinet join forces to accelerate digital transformation for enterprises

Fortinet, Industry news, Windstream Enterprise / SecurityTicks

Windstream Enterprise and Fortinet join forces to accelerate digital transformation for enterprises 2024-03-11 at 16:01 By Industry News Windstream Enterprise unveiled Secure Flex Premium, a comprehensive suite of advanced technology solutions powered by Fortinet that provides a fully customizable cybersecurity infrastructure aimed to address the current and future network security needs of each unique customer.

React to this headline:

Windstream Enterprise and Fortinet join forces to accelerate digital transformation for enterprises Read More »

Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks

exploited, Fortinet, Vulnerabilities / SecurityTicks

Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks 2024-03-11 at 16:01 By Eduard Kovacs 150,000 systems possibly impacted by the recent Fortinet vulnerability CVE-2024-21762, but there is still no evidence of widespread exploitation. The post Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks appeared first

React to this headline:

Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks Read More »

State-sponsored hackers know enterprise VPN appliances inside out

attacks, cyber espionage, Don't miss, enterprise, Fortinet, government-backed attacks, Hot stuff, Ivanti, Mandiant, News, threat, Threat Intelligence / SecurityTicks

State-sponsored hackers know enterprise VPN appliances inside out 2024-02-28 at 14:19 By Zeljka Zorz Suspected Chinese state-sponsored hackers who have been leveraging Ivanti Connect Secure VPN flaws to breach a variety of organizations have demonstrated “a nuanced understanding of the appliance”, according to Mandiant incident responders and threat hunters. They were able to perform a

React to this headline:

State-sponsored hackers know enterprise VPN appliances inside out Read More »

Vulnerable Fortinet Devices: Low-hanging Fruit for Threat Actors

critical infrastructure, Cybercrime forums, exploit, Fortinet, ODIN, vulnerability / SecurityTicks

Vulnerable Fortinet Devices: Low-hanging Fruit for Threat Actors 2024-02-16 at 08:46 By cybleinc Cyble analyzes the increasing incidences of vulnerabilities in Fortinet, highlighting the impact they have on Critical Infrastructure. The post Vulnerable Fortinet Devices: Low-hanging Fruit for Threat Actors appeared first on Cyble. This article is an excerpt from Cyble View Original Source React

React to this headline:

Vulnerable Fortinet Devices: Low-hanging Fruit for Threat Actors Read More »

Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762)

Don't miss, Fortinet, Hot stuff, News, Rapid7, security update, vulnerability / SecurityTicks

Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762) 2024-02-12 at 21:01 By Zeljka Zorz Fortinet has patched critical remote code execution vulnerabilities in FortiOS (CVE-2024-21762, CVE-2024-23313), one of which is “potentially” being exploited in the wild. The exploitation-in-the-wild has been confirmed by CISA, by adding it to its Known Exploited Vulnerabilities (KEV) catalog, though

React to this headline:

Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762) Read More »

Fortinet Warns of New FortiOS Zero-Day

exploited, Featured, Fortinet, Vulnerabilities, Zero-Day / SecurityTicks

Fortinet Warns of New FortiOS Zero-Day 2024-02-09 at 13:46 By Eduard Kovacs Fortinet patches CVE-2024-21762, a critical remote code execution vulnerability that may have been exploited in the wild. The post Fortinet Warns of New FortiOS Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Fortinet Warns of New FortiOS Zero-Day Read More »

Chinese hackers breached Dutch Ministry of Defense

Don't miss, EU, Fortinet, Government, government-backed attacks, Hot stuff, Malware, News, Remote Access Trojan, vulnerability / SecurityTicks

Chinese hackers breached Dutch Ministry of Defense 2024-02-07 at 16:46 By Helga Labus Chinese state-sponsored hackers have breached the Dutch Ministry of Defense (MOD) last year and deployed a new remote access trojan (RAT) malware to serve as a backdoor. “The effects of the intrusion were limited because the victim network was segmented from the

React to this headline:

Chinese hackers breached Dutch Ministry of Defense Read More »

Fortinet Patches Critical Vulnerabilities in FortiSIEM

Fortinet, Vulnerabilities / SecurityTicks

Fortinet Patches Critical Vulnerabilities in FortiSIEM 2024-02-07 at 14:16 By Ionut Arghire Two critical OS command injection flaws in FortiSIEM could allow remote attackers to execute arbitrary code. The post Fortinet Patches Critical Vulnerabilities in FortiSIEM appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Fortinet Patches Critical Vulnerabilities in FortiSIEM Read More »

Fortinet unveils networking solution integrated with Wi-Fi 7

Fortinet, Industry news / SecurityTicks

Fortinet unveils networking solution integrated with Wi-Fi 7 2024-01-16 at 18:01 By Industry News Fortinet announced a comprehensive secure networking solution integrated with Wi-Fi 7. Fortinet’s first Wi-Fi 7 access point, FortiAP 441K, delivers increased speed and capacity, and the new FortiSwitch T1024 is purpose-built with 10 Gigabit Ethernet (GE) access and 90W Power over

React to this headline:

Fortinet unveils networking solution integrated with Wi-Fi 7 Read More »