Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have uncovered a previously undocumented Linux botnet family named Evooo1Bot, which is derived from the Mirai botnet source code and…
Tag: Fortinet
OpenAI Unveils GPT-5.6-Cyber: Reduced Safeguards for Exploit Development and Vulnerability Research
OpenAI has launched GPT-5.6-Cyber, a specialized cybersecurity model designed for vulnerability research, penetration testing, and incident response. Built on the GPT-5.6 Sol…
Polish Power Plant Breach via Private Cellular Network Shuts Turbine
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power (CHP) plant by breaching…
Kimsuky Builds Offline AI Stack to Boost Phishing and Malware Operations
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Fortinet FortiGuard Labs has disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool popular among overseas Chinese…
Critical Arista VeloCloud Orchestrator Command Injection Flaw Exploited in the Wild
A maximum-severity command injection vulnerability in on-premises versions of Arista VeloCloud Orchestrator (VCO) is being actively exploited. Tracked as CVE-2026-16812 with a…
Fortinet FortiOS SSL-VPN
VPN component of Fortinet's FortiOS operating system, affected by CVE-2025-68686 information disclosure vulnerability.
CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Microsoft SharePoint Server, tracked as…
CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet FortiSandbox OS Command Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…