Fortinet FortiSIEM Flaw Lets Remote Attackers Run Code
Crafted packets can cross a file-path restriction in FortiSIEM 7.5.0. Upgrade to 7.5.1 and limit access to TCP/27918 while scheduling the change.
Read article →network
Network activity, protocols, infrastructure, and detection.
Latest in network
Bank Intruder Targets Update Server After Third-Party Gateway Entry
At a European bank, compromised credentials opened a third-party gateway route; months of scanning and password guessing preceded a blocked attempt against WSUS.
Read article →
Attackers Hid PEERSTITCH in Fortinet Firewalls After Manager Breach
A stolen FortiManager archive helped attackers reach managed FortiGates; a memory-only implant linked logging and VPN processes. Check revisions and rotate trust material.
Read article →
Fortinet CLI Flaw Lets Privileged Attackers Change Appliance Files
CISA added a flaw affecting four Fortinet products to KEV. Match installed releases to Fortinet's fixes, then examine privileged CLI access and file changes.
Read article →
Cisco Email Gateway Attachment Flaw Gives Attackers Root Access
Exploited file-write flaw reaches gateways using File Reputation and older scanner tools. Check each appliance's logs and scanner version before choosing an update or rebuild.
Read article →
ARMORY CASTLE Uses BeyondTrust Zero-Day to Keep Root Access
The actor exploited Remote Support, installed a root backdoor and reached managed endpoints. Patch BT26-05, then investigate appliance persistence and sessions.
Read article →
Fortinet FortiSandbox Flaw Lets Remote Callers Bypass GUI Login
Crafted HTTP requests can bypass FortiSandbox management login. Check appliance and PaaS versions, upgrade affected branches and restrict GUI reachability.
Read article →
TLS Libraries Disagree on Which Signed Certificates Pass Name Restrictions
The same signed certificate can pass one validator and fail another. Test the actual TLS path, update affected libraries and keep issued names explicit.
Read article →
Cisco Email Hardening Fixes Five Flaw Groups, Including Two Exploited Issues
Cisco updates Secure Email Gateway and Secure Email and Web Manager across five weakness groups. Compare each appliance's build with its product-specific fixed release.
Read article →
Palo Alto Networks PAN-OS Flaw Lets Attackers Run Code as Root
Limited exploitation targets authenticated access to PAN-OS management. Compare installed hotfixes, restrict the admin path and inspect three vendor-listed IPs.
Read article →
Microsoft Patches Exploited Windows File Warning Bypass
The October updates address an exploited Windows Shell bypass and separate unauthenticated DHCP Server code execution. Check installed builds on endpoints and DHCP hosts.
Read article →
Fake WatchGuard VPN download takes passwords before serving the real client
A lookalike download page collects the VPN server and credentials twice, then starts a signed WatchGuard installer. Check browser history and VPN logins.
Read article →
Ivanti VPN Zero-Days Let UTA0576 Reach Root and Steal Credentials
A patched-at-the-time Connect Secure VPN fell to a three-flaw chain. Upgrade affected branches and investigate memory, LDAP traffic and movement from the appliance.
Read article →Showing 1–13 of 68