News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Sat 17 Oct· 1 article
-
CISA Flags Fortinet and BeyondTrust Flaws Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Fortinet Multiple Products Path Traversal (CVE-2025-61624) and BeyondTrust Remote Support Authentication…
Fri 16 Oct· 1 article
-
Hackers Stole Fortinet Credentials from 500 Firewalls via FortiManager
PEERSTITCH malware: How attackers compromised 500 Fortinet firewalls via FortiManager discusses a multi-stage intrusion disclosed by Palo Alto Networks Unit 42. The operation began in September 2024 when attackers exploited CVE-2024-47575 (FortiJump) to…
Fri 2 Oct· 1 article
-
CISA Warns FortiMail Flaw Is Being Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet FortiMail flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, CVE-2026-104286, is a path traversal issue (CWE-22) that can be triggered by…
Thu 10 Sep· 1 article
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
Tue 28 Jul· 1 article
-
U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Arista VeloCloud Orchestrator and Fortinet FortiOS to its Known Exploited Vulnerabilities catalog. Two notable flaws include CVE-2025-68686, affecting…
Sat 18 Jul· 1 article
-
CISA urges patch of FortiSandbox, SharePoint flaws amid exploits
On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two critical vulnerabilities from Fortinet FortiSandbox and one from Microsoft SharePoint in its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities…
Tue 16 Jun· 1 article
-
Fortinet warns of active exploits in unpatched FortiSandbox flaws
Fortinet is facing active exploitation of three critical vulnerabilities in its FortiSandbox software, confirmed by cybersecurity firm Defused Cyber. Two of these vulnerabilities were reportedly unpatched for two months, while the third had a patch released…
Thu 11 Jun· 1 article
-
Fortinet patches CVE-2026-25089 in FortiSandbox command injection
Fortinet has released patches for a critical vulnerability in its FortiSandbox products, specifically CVE-2026-25089, which has a CVSS score of 9.8. This OS command injection flaw allows unauthenticated attackers to execute arbitrary commands through…
Thu 28 May· 1 article
-
FortiClient EMS flaw used to deploy EKZ Infostealer via fake patch
A critical vulnerability in FortiClient EMS, tracked as CVE-2026-35616 with a CVSS score of 9.1, has been exploited in recent malware attacks. The flaw allows remote code execution (RCE) without authentication and enables attackers to bypass access controls.…
Wed 13 May· 1 article
-
Fortinet patches critical RCE flaws in FortiAuthenticator, FortiSandbox
Fortinet has patched two critical flaws affecting FortiSandbox and FortiAuthenticator, which could allow attackers to remotely execute code on unpatched systems. The first vulnerability, CVE-2026-44277, is an improper access control issue in…
Wed 8 Apr· 1 article
-
CISA adds critical Ivanti EPMM flaw to KEV after PoC release
The U.S. Cybersecurity and Infrastructure Security Agency has added a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-35616 and CVE-2026-1340, with a CVSS score of 9.8. The critical vulnerability is a code…
Mon 6 Apr· 1 article
-
CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw
Fortinet issued emergency, out-of-band patches for a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616, which Fortinet rates as CVSS 9.1 and states is already being exploited in attacks in the wild. The flaw is an improper access control…
Mon 30 Mar· 1 article
-
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution
A critical Fortinet FortiClient EMS vulnerability, tracked as CVE-2026-21643 with a CVSS score of 9.1, is being actively exploited and allows remote code execution via SQL injection. The issue is described as an improper neutralisation of special elements…
Tue 10 Mar· 1 article
-
Attackers exploit FortiGate devices to access sensitive network information
Attackers are exploiting FortiGate devices to breach networks and steal configuration data containing service account credentials and internal network details, according to Security Affairs. SentinelOne researchers warn that threats capitalise on…
Sat 14 Feb· 1 article
-
U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a BeyondTrust RS and PRA flaw, CVE-2026-1731 (CVSS 9.9), to its Known Exploited Vulnerabilities catalog, disclosed this week after BeyondTrust released security updates on 6 February…
Tue 10 Feb· 1 article
-
China-linked APT UNC3886 targets Singapore telcos
According to Cyber Security Agency of Singapore (CSA), in a cyber espionage campaign linked to the China-linked APT UNC3886, Singapore’s telecom sector was targeted by attacks on all four major telcos—M1, SIMBA Telecom, Singtel and StarHub—since July 2025.…
Mon 9 Feb· 1 article
-
Critical Fortinet FortiClientEMS flaw allows remote code execution
Fortinet warns of a critical FortiClientEMS vulnerability that lets remote attackers run malicious code without logging in, tracked as CVE-2026-21643 with a CVSS score of 9.1. According to Fortinet, the flaw involves improper neutralization of special…
Mon 2 Feb· 1 article
-
Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION was published on 2 February 2026 and presents a curated selection of security stories from Security Affairs. The international edition features items such as DOJ releases…
Wed 28 Jan· 2 articles
-
Fortinet Multiple Products2 articles this day · Security Affairs first
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog · Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
-
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet flaw to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-24858, which carries a CVSS score of 9.4 and affects FortiOS, FortiManager, and…
-
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Fortinet has released patches for a critical FortiOS flaw, CVE-2026-24858, which allows an authentication bypass via FortiCloud SSO and is reportedly being exploited in the wild. The vulnerability affects FortiOS, FortiManager and FortiAnalyzer, with a CVSS…
-
Fri 23 Jan· 1 article
-
Fortinet warns of active FortiCloud SSO bypass affecting updated devices
Fortinet has confirmed that attacks are bypassing FortiCloud SSO on devices that are fully patched, with threat actors automating firewall changes, adding users, enabling VPNs and exfiltrating configurations in campaigns that mirror earlier late-2025…
Thu 22 Jan· 1 article
-
Arctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacks
Arctic Wolf warned of a new wave of automated attacks making unauthorized firewall configuration changes on Fortinet FortiGate devices, with researchers reporting a cluster observed since 15 January 2026. Attackers reportedly created generic accounts for…
No older articles match these filters.