Fortinet FortiSandbox OS Command Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
Cybersecurity researchers at SentinelOne SentinelLABS have disclosed details of sustained cyber espionage activity targeting Pakistani law enforcement organizations, including the Balochistan Police,…
A path traversal vulnerability in FortiWeb exploited via fake PoC repos in the ChocoPoC campaign. Allows attackers to read arbitrary files on…
FortiWeb is a web application firewall by Fortinet, associated with CVE-2025-64446 used as a lure in the ChocoPoC campaign.
The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were…
A Brazilian banking trojan called Ousaban is targeting Windows users in Spain and Portugal, using phishing PDFs disguised as corrupted files. Discovered…
FortiGuard is Fortinet's security services suite, including antivirus and threat intelligence. It flags Ousaban samples and provides indicators of compromise.
FortiMail is Fortinet's email security product that can flag phishing emails used in the Ousaban campaign.
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…