Fortinet VPN design flaw hides successful brute-force attacks
2 天之前 · A design flaw in the Fortinet VPN server's logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off …
Chinese hackers exploit Fortinet VPN zero-day to steal credentials
5 天之前 · Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.
High-severity Fortinet VPN flaw allows privilege escalation
2024年11月14日 · Fortinet patched the hole on Tuesday, so if you haven't already, upgrade to a fixed release. Pentera Labs' bug hunter Nir Chako found and reported the flaw to Fortinet, plus …
Newsroom | Fortinet News Releases
2024年11月11日 · Read the latest Fortinet press releases, blogs, and news articles for the latest updates and announcements.
China state hackers infected 20,000 Fortinet VPNs, Dutch spy …
2024年6月11日 · Hackers working for the Chinese government gained access to more than 20,000 VPN appliances sold by Fortinet using a critical vulnerability that the company failed to …
CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN …
CVE-2024-21762 is an out-of-bound write vulnerability in sslvpnd, the SSL VPN daemon in Fortinet FortiOS. An unauthenticated, remote attacker could exploit this vulnerability by …
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
2024年2月8日 · Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under …
2024年2月9日 · Fortinet has disclosed a new critical security flaw in FortiOS SSL VPN that it said is likely being exploited in the wild. The vulnerability, CVE-2024-21762 (CVSS score: 9.6), …
Fortinet confirms VPN vulnerability exploited in the wild
2022年12月12日 · Fortinet issued an advisory Monday detailing the heap-based buffer overflow flaw, tracked as CVE-2022-42475, affecting multiple versions of its FortiOS SSL-VPN. Ranked …
Fortinet says hackers exploited critical vulnerability to infect VPN ...
2023年1月12日 · Remote code-execution bug was exploited to backdoor vulnerable servers. An unknown threat actor abused a critical vulnerability in Fortinet’s FortiOS SSL-VPN to infect …