News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 13 Oct· 1 article
-
Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks
Fortinet has released a set of patches addressing 13 vulnerabilities across eight product lines, issued on 13 October 2026. The most serious flaws are two unauthenticated, remote-exploitation risks: an authentication bypass in FortiSandbox (CVE-2026-107656)…
Mon 12 Oct· 1 article
-
Actively Exploited Vulnerabilities Jump to 100 in Q3 2026
Daily CyberSecurity’s Q3 2026 CVE report tracks every entry CISA added to the Known Exploited Vulnerabilities (KEV) catalog between 1 July and 30 September 2026. In this quarter, 100 actively exploited vulnerabilities were added, up from 75 in Q2, with…
Mon 5 Oct· 1 article
-
Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk
Researchers tracked 2,652 new CVEs between 28 September and 4 October 2026, with seven flaws showing confirmed exploitation. Daily Cybersecurity (DC) flagged six exploited flaws, and six appeared in CISA’s Known Exploited Vulnerabilities (KEV) catalog. Five…
Fri 2 Oct· 3 articles
-
Fortinet FortiMail3 articles this day · The Hacker News first
Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTP · CISA Warns FortiMail Flaw Is Being Exploited in the Wild
-
Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTP
Fortinet’s FortiMail has a critical zero-day vulnerability being exploited in the wild, tracked as CVE-2026-104286 with a CVSS score of 9.8. The flaw is a path traversal and improper neutralisation of NULL byte/NULL character, which could allow attackers to…
-
CISA Warns FortiMail Flaw Is Being Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet FortiMail flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, CVE-2026-104286, is a path traversal issue (CWE-22) that can be triggered by…
-
Fortinet FortiMail Zero Day Exploited in Attacks, CISA Warns
Fortinet has disclosed a critical zero-day affecting Fortinet FortiMail that has been observed being exploited in the wild. The flaw, tracked as CVE-2026-104286 with a CVSS score of 9.8, allows unauthenticated attackers to write arbitrary files on the…
-
Thu 1 Oct· 2 articles
-
Fortinet FortiMail2 articles this day · CISA first
FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks · CISA Flags Fortinet FortiMail Flaw Under Active Exploitation
-
FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks
Fortinet’s FortiMail appliance is actively exploited due to a path traversal flaw tracked as CVE-2026-104286, rated CVSS 9.8. The vulnerability arises from a combination of path traversal (CWE-22) and poor handling of NULL bytes (CWE-158), enabling…
-
CISA Flags Fortinet FortiMail Flaw Under Active Exploitation
CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities (KEV) catalogue on 1 October 2026. The vulnerability affects Fortinet FortiMail and is named the Fortinet FortiMail Path Traversal Vulnerability. It allows an unauthenticated attacker to write…
-
Tue 15 Sep· 1 article
-
Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BB
Threat actors targeted Thai broadband provider 3BB, also known as Triple T Broadband, by exploiting vulnerabilities in Fortinet and F5 products, according to cybersecurity firm Hunt.io. The intrusion was uncovered after the attackers left their tools in an…
Mon 14 Sep· 1 article
-
Russian Hackers Exploit Fortinet Flaw to Deploy PivotC2 Trojan
The SOCRadar Threat Research Unit says a suspected Russian-speaking cybercrime operator was actively targeting Fortinet edge devices in September 2026. More than 30,000 IP addresses were targeted, with 178 devices confirmed compromised, primarily in the…
Thu 10 Sep· 4 articles
-
Fortinet Multiple Products3 articles this day · CISA first
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day · Fortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 Devices
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
-
Fortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 Devices
Security researchers report that a high-severity, unauthenticated remote code execution vulnerability in Fortinet products, tracked as CVE-2025-25249 (CVSS 7.4), has been exploited to deploy the PivotC2 Node[.]js RAT. Described as a heap-based buffer…
-
CISA Flags Actively Exploited Fortinet Flaw Allowing Code Execution
CISA has added CVE-2025-25249 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Fortinet’s FortiOS, FortiSwitchManager and FortiSASE products. Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability allows…
-
-
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
CISA has added three actively exploited flaws to the Known Exploited Vulnerabilities (KEV) catalog, affecting Cisco, Citrix, and Fortinet products, with a deadline of 12 September 2026 for Federal Civilian Executive Branch (FCEB) agencies to apply patches.…
Wed 9 Sep· 1 article
-
Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic Hijacking
Fortinet has released patches for ten vulnerabilities across its product line, including two critical flaws. The most severe is CVE-2026-84390, a source-code information exposure affecting the FortiMonitorOnSight web portal. Fortinet says a remote,…
Tue 8 Sep· 1 article
-
Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute Traffic
Fortinet has disclosed three high-severity vulnerabilities affecting FortiMonitor OnSight, FortiSandbox, and FortiPAM, potentially allowing unauthorized access to sensitive corporate data and internal systems. The FortiMonitor flaw involves a static key…
Fri 4 Sep· 1 article
-
Gentlemen Ransomware Storms Networks Through Fortinet VPNs
The Gentlemen ransomware operates as a ransomware-as-a-service under the GOLD SHERWOOD banner, with affiliates handling data theft, defence disruption and rapid encryption. Sophos Counter Threat Unit confirms the operation, noting a repeatable affiliate…
Thu 13 Aug· 1 article
-
Fortinet patches CVE-2026-26035 auth bypass in FortiWeb
Fortinet has released patches for eight vulnerabilities in its products, including significant authentication issues in FortiWeb and FortiManager. The CVE-2026-26035 vulnerability in FortiWeb allows unauthenticated remote attackers to access the GUI/CLI…
Tue 11 Aug· 1 article
-
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
The article discusses the Gunra ransomware gang, which is exploiting vulnerabilities in Fortinet products, particularly CVE-2024-55591 and CVE-2025-24472, to bypass multifactor authentication (MFA) and compromise critical infrastructure and government…
Tue 28 Jul· 1 article
-
U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Arista VeloCloud Orchestrator and Fortinet FortiOS to its Known Exploited Vulnerabilities catalog. Two notable flaws include CVE-2025-68686, affecting…
Mon 27 Jul· 2 articles
-
Fortinet FortiOS bug CVE-2025-68686 exposes data to hackers
On 27 July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2025‑68686 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Fortinet FortiOS and is named “Fortinet FortiOS Exposure of Sensitive…
-
CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV
On July 27, 2026, CISA added two known exploited vulnerabilities to their KEV list: a critical remote code execution (RCE) flaw in Arista VeloCloud and a persistence bypass in FortiOS. These vulnerabilities are identified as CVE-2026-16812 (CVSS 10.0) and…
Sat 18 Jul· 2 articles
-
CISA urges patch of FortiSandbox, SharePoint flaws amid exploits
On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two critical vulnerabilities from Fortinet FortiSandbox and one from Microsoft SharePoint in its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities…
-
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
The article discusses a critical vulnerability (CVE-2026-11386) in the Ubuntu Pro Client, reported on July 16, 2026, by Frederick Jerusha. This flaw allows arbitrary code execution with root privileges, scoring 9.0 on the CVSS scale. It affects multiple…
Fri 17 Jul· 3 articles
-
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated urgent patches for two critical vulnerabilities in Fortinet's FortiSandbox, identified as CVE-2026-39808 and CVE-2026-25089, both rated 9.1 on the CVSS scale. These vulnerabilities…
-
Microsoft SharePoint2 articles this day · SecurityOnline first
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users · CISA orders urgent patches for SharePoint, FortiSandbox flaws
-
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
Today's critical security alert reveals three active exploits: CVE-2026-58644 related to Microsoft SharePoint, and two CVE entries (CVE-2026-25089 and CVE-2026-39808) concerning Fortinet FortiSandbox command injection vulnerabilities. An unattributed…
-
CISA orders urgent patches for SharePoint, FortiSandbox flaws
CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog as of July 16, 2026. These include two critical vulnerabilities affecting Fortinet FortiSandbox and one affecting Microsoft SharePoint. The federal agencies are required to…
-
Thu 16 Jul· 3 articles
-
CISA adds FortiSandbox flaw CVE-2026-39808 to KEV catalogue
On 16 July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑39808 to its Known Exploited Vulnerabilities (KEV) catalogue. The affected vendor is Fortinet and the product is FortiSandbox. The Fortinet FortiSandbox OS Command…
-
CISA KEV Catalogue Adds FortiSandbox Flaw CVE-2026-25089
CISA has added CVE‑2026‑25089 to its Known Exploited Vulnerabilities catalogue, affecting Fortinet’s FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS products. The vulnerability is an OS command injection flaw that permits an unauthenticated attacker…
-
Red Hat OpenShift AI flaw lets attackers read local files
Three critical vulnerabilities have been identified: CVE-2026-58644 in Microsoft SharePoint, and two instances of CVE-2026-25089 affecting Fortinet FortiSandbox, which involve command injection risks. Notably, Red Hat has reported a critical flaw in Red Hat…
Wed 17 Jun· 2 articles
-
FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code
FortiSandbox has critical vulnerabilities (CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089) affecting its API and Web UI components, allowing attackers to bypass authentication, escalate privileges, and execute commands without valid credentials. These…
-
3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs
Three newly patched vulnerabilities in Fortinet's FortiSandbox, rated critical, are actively being exploited. Defused's honeypots detected attempts targeting CVE-2026-39808, CVE-2026-39813, and CVE-2026-25089. CVE-2026-39808 allows authentication bypass,…
Tue 16 Jun· 1 article
-
Fortinet warns of active exploits in unpatched FortiSandbox flaws
Fortinet is facing active exploitation of three critical vulnerabilities in its FortiSandbox software, confirmed by cybersecurity firm Defused Cyber. Two of these vulnerabilities were reportedly unpatched for two months, while the third had a patch released…
Thu 11 Jun· 1 article
-
Fortinet patches CVE-2026-25089 in FortiSandbox command injection
Fortinet has released patches for a critical vulnerability in its FortiSandbox products, specifically CVE-2026-25089, which has a CVSS score of 9.8. This OS command injection flaw allows unauthenticated attackers to execute arbitrary commands through…
Wed 10 Jun· 2 articles
-
Fortinet FortiSandbox2 articles this day · SecurityOnline first
Critical Vulnerabilities Patched in Fortinet, Ivanti Products · FortiSandbox flaw CVE-2026-25089 lets attackers run commands
-
Critical Vulnerabilities Patched in Fortinet, Ivanti Products
Fortinet and Ivanti released patches for critical vulnerabilities in their products, including an OS command injection flaw (CVE-2026-25089) with a CVSS score of 9.8 in Fortinet’s FortiSandbox. This vulnerability could allow unauthenticated attackers to…
-
FortiSandbox flaw CVE-2026-25089 lets attackers run commands
The content discusses a critical security vulnerability tracked as CVE-2026-25089 affecting the Fortinet ecosystem, specifically the FortiSandbox. This vulnerability allows unauthenticated attackers to execute commands using specially crafted HTTP requests,…
-
Thu 28 May· 3 articles
-
Fortinet FortiClient EMS2 articles this day · SecurityWeek first
FortiClient EMS flaw used to deploy EKZ Infostealer via fake patch · FortiClient EMS bug exploited to deliver EKZ Infostealer
-
FortiClient EMS flaw used to deploy EKZ Infostealer via fake patch
A critical vulnerability in FortiClient EMS, tracked as CVE-2026-35616 with a CVSS score of 9.1, has been exploited in recent malware attacks. The flaw allows remote code execution (RCE) without authentication and enables attackers to bypass access controls.…
-
FortiClient EMS bug exploited to deliver EKZ Infostealer
A critical vulnerability in FortiClient Endpoint Management Server (EMS), tracked as CVE-2026-35616 with a CVSS score of 9.1, has been exploited in recent attacks to deploy the EKZ Infostealer malware. This flaw allows remote code execution without…
-
-
FortiClient EMS flaw used to drop EKZ Infostealer via fake updates
The article discusses a critical cybersecurity threat targeting corporate infrastructure through a FortiClient EMS exploitation campaign. It highlights three active vulnerabilities identified today, including CVE-2026-48027, CVE-2026-45321, and…
Mon 18 May· 1 article
-
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
Ivanti, Fortinet, SAP, VMware, and n8n have all released security fixes for a range of flaws that could allow unauthenticated attackers to read data, execute code or bypass authentication. The notable listing starts with Ivanti Xtraction CVE-2026-8043 (CVSS…