News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 19 Oct· 1 article
-
Fortinet Flaw Exploits Led to Stealthy FortiGate Implant in Telecom Breach
Security researchers have linked a sequence of exploited Fortinet vulnerabilities to a stealthy FortiGate implant used in a telecom intrusion. The activity began with the exploitation of a critical remote code execution flaw in FortiManager, tracked as…
Wed 14 Oct· 1 article
-
Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day
Security updates have addressed 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including several critical-severity flaws that could allow unauthenticated code execution, authentication bypass, DoS, or leakage of sensitive data. Citrix…
Fri 2 Oct· 1 article
-
Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTP
Fortinet’s FortiMail has a critical zero-day vulnerability being exploited in the wild, tracked as CVE-2026-104286 with a CVSS score of 9.8. The flaw is a path traversal and improper neutralisation of NULL byte/NULL character, which could allow attackers to…
Tue 15 Sep· 1 article
-
Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BB
Threat actors targeted Thai broadband provider 3BB, also known as Triple T Broadband, by exploiting vulnerabilities in Fortinet and F5 products, according to cybersecurity firm Hunt.io. The intrusion was uncovered after the attackers left their tools in an…
Thu 10 Sep· 1 article
-
Fortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 Devices
Security researchers report that a high-severity, unauthenticated remote code execution vulnerability in Fortinet products, tracked as CVE-2025-25249 (CVSS 7.4), has been exploited to deploy the PivotC2 Node[.]js RAT. Described as a heap-based buffer…
Wed 9 Sep· 1 article
-
Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic Hijacking
Fortinet has released patches for ten vulnerabilities across its product line, including two critical flaws. The most severe is CVE-2026-84390, a source-code information exposure affecting the FortiMonitorOnSight web portal. Fortinet says a remote,…
Thu 13 Aug· 1 article
-
Fortinet patches CVE-2026-26035 auth bypass in FortiWeb
Fortinet has released patches for eight vulnerabilities in its products, including significant authentication issues in FortiWeb and FortiManager. The CVE-2026-26035 vulnerability in FortiWeb allows unauthenticated remote attackers to access the GUI/CLI…
Wed 17 Jun· 1 article
-
3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs
Three newly patched vulnerabilities in Fortinet's FortiSandbox, rated critical, are actively being exploited. Defused's honeypots detected attempts targeting CVE-2026-39808, CVE-2026-39813, and CVE-2026-25089. CVE-2026-39808 allows authentication bypass,…
Wed 10 Jun· 1 article
-
Critical Vulnerabilities Patched in Fortinet, Ivanti Products
Fortinet and Ivanti released patches for critical vulnerabilities in their products, including an OS command injection flaw (CVE-2026-25089) with a CVSS score of 9.8 in Fortinet’s FortiSandbox. This vulnerability could allow unauthenticated attackers to…
Thu 28 May· 1 article
-
FortiClient EMS bug exploited to deliver EKZ Infostealer
A critical vulnerability in FortiClient Endpoint Management Server (EMS), tracked as CVE-2026-35616 with a CVSS score of 9.1, has been exploited in recent attacks to deploy the EKZ Infostealer malware. This flaw allows remote code execution without…
Wed 13 May· 1 article
-
Fortinet and Ivanti patch 18 flaws, including three critical bugs
Fortinet and Ivanti on Tuesday announced patches for 18 vulnerabilities across their product portfolios, including three critical-severity bugs. Fortinet published 11 advisories describing as many bugs, among them CVE-2026-44277 (CVSS 9.1) an improper access…
Wed 15 Apr· 1 article
-
Fortinet patches critical FortiSandbox flaws and high risk Cloud bugs
Fortinet on Tuesday released 26 advisories detailing 27 vulnerabilities across its products, including two critical-severity flaws in FortiSandbox. Tracked as CVE-2026-39813, the first critical bug affects the FortiSandbox JRPC API and could allow attackers…
Mon 6 Apr· 1 article
-
Fortinet Rushes Emergency Fixes for Exploited Zero-Day
Fortinet rushed emergency fixes over the weekend for a FortiClient EMS vulnerability that has been exploited as a zero-day. The flaw, described as an improper access control issue, is tracked as CVE-2026-35616 with a CVSS of 9.1 and could enable remote code…
Tue 31 Mar· 1 article
-
Exploitation of Critical Fortinet FortiClient EMS Flaw Begins
Threat intelligence firm Defused Cyber warned that threat actors have begun exploiting a critical SQL injection flaw in Fortinet FortiClient EMS, tracked as CVE-2026-21643, which can be exploited remotely without authentication via crafted HTTP requests.…
Wed 11 Feb· 1 article
-
Fortinet Patches High-Severity Vulnerabilities
Fortinet on Tuesday published eight advisories detailing security defects addressed across FortiAuthenticator, FortiClient for Windows, FortiGate, FortiOS and FortiSandbox, including two high-severity issues. The most severe is CVE-2025-52436, an XSS bug in…
Wed 28 Jan· 1 article
-
Fortinet Patches Exploited FortiCloud SSO Authentication Bypass
Fortinet has issued emergency patches for a FortiCloud SSO login authentication bypass tracked as CVE-2026-24858, which attackers have exploited in the wild to gain access to devices registered to other FortiCloud accounts. The company noted that the…
Fri 23 Jan· 1 article
-
Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices
Fortinet on Thursday confirmed that recent attacks are bypassing FortiCloud single sign-on (SSO) login authentication on devices fully patched against recent vulnerabilities. Leveraging automation, hackers are making configuration changes to FortiGate…
Thu 22 Jan· 1 article
-
New Wave of Attacks Targeting FortiGate Firewalls
SecurityWeek reports a new wave of attacks targeting FortiGate firewalls, with threat actors performing malicious SSO logins to create new accounts, change VPN configurations, and exfiltrate device data, according to Arctic Wolf. The activity mirrors a…
No older articles match these filters.