Fortinet : cette faille critique dans FortiSwitch permet de changer le mot de passe admin à distance https://www.it-connect.fr/fortinet-faille-critique-fortiswitch-changer-le-mot-de-passe-admin-cve-2024-48887/ #ActuCybersécurité #Cybersécurité #Fortinet
Configurar BGP en firewalls FortiGate #fortinet #bgp #fortigate #redes
https://nosololinux.es/configurar-bgp-en-firewalls-fortigate/
When you are at work and realize half the Fediverse and most Anarchist media is blocked by Fortinet! 
Critical #Fortinet #FortiSwitch flaw allows remote attackers to change admin passwords
https://securityaffairs.com/176380/security/fortinet-fortiswitch-flaw.html
#securityaffairs #hacking
CERT.at investigates ransomware attacks via critical Fortinet vulnerabilities (FortiOS, FortiProxy) and recommends urgent forensic investigations of all devices that didn't have FortiOS 7.0.16 installed before 2025-01-27, when the PoC for CVE-2024-55591 was published. Those devices may be compromised despite having been patched later.
Check (German) warning by @CERT_at
https://www.cert.at/de/warnungen/2025/3/ransomware-gruppen-nutzen-weiterhin-kritische-fortinet-schwachstellen-warnung-vor-gepatchten-aber-bereits-kompromittierten-geraten
Long story with Forescout:
https://www.forescout.com/blog/new-ransomware-operator-exploits-fortinet-vulnerability-duo/
CISA Warns: Fortinet Vulnerability Exploited in Ransomware Attacks - https://www.redpacketsecurity.com/fortinet-vulnerability-exploited-in-ransomware-attack-cisa-warns/
Hackers are exploiting #Fortinet firewall bugs to plant #ransomware
https://techcrunch.com/2025/03/17/hackers-are-exploiting-fortinet-firewall-bugs-to-plant-ransomware/
U.S. CISA adds #Fortinet FortiOS/FortiProxy and #GitHub Action flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/175583/security/u-s-cisa-adds-fortinet-fortios-fortiproxy-and-github-action-flaws-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking
U.S. CISA adds #Fortinet FortiOS/FortiProxy and #GitHub Action flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/175583/security/u-s-cisa-adds-fortinet-fortios-fortiproxy-and-github-action-flaws-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking
ReliaQuest (ex. Digital Shadows): https://www.reliaquest.com/blog/credential-theft-vs-admin-control-threat-spotlight/
This report examines how VPN vulnerabilities, particularly CVE-2018-13379 and CVE-2022-40684 affecting Fortinet products, remain highly exploited years after disclosure. The analysis reveals a 4,223% increase in cybercriminal forum discussions about Fortinet VPNs since 2018, highlighting their continued relevance in attack campaigns. Threat actors exploit these vulnerabilities primarily through credential theft and gaining administrative control. The report details how cybercriminals and state-sponsored APT groups leverage these vulnerabilities, with 64% of VPN vulnerabilities directly linked to ransomware campaigns. The report also examines a 2025 breach by 'Belsen_Group' that compromised over 15,000 FortiGate devices using CVE-2022-40684. The authors provide detection rules, threat hunting recommendations, and defensive strategies to mitigate these threats, while predicting increased hybrid threats targeting VPN infrastructure and the growing impact of AI on VPN exploitation.
#cybersecurity #cybernews #ransomware #fortinet
New SuperBlack ransomware exploits Fortinet auth bypass flaws
https://www.bleepingcomputer.com/news/security/new-superblack-ransomware-exploits-fortinet-auth-bypass-flaws/
Going to start standing up my office infrastructure over the coming weeks. Picked up a FortiGate firewall to start with, hopefully will be pairing it with a FortiAP.
Trying to get hold of a secondhand rack then will be sourcing at least one blade and deciding what sort of storage setup I will go for.
Lots to design and implement while working full time!
Read: https://hackread.com/fortios-vulnerability-super-admin-privilege-escalation/
Firewalls FortiGate : Fortinet révèle une seconde faille critique corrigée par le patch de janvier 2025 https://www.it-connect.fr/firewalls-fortigate-fortinet-revele-une-seconde-faille-critique-corrigee-par-le-patch-de-janvier-2025/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Fortinet
"#Fortinet warned today that attackers are exploiting another now-patched zero-day bug in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks."
Attackers exploit a new #zeroday to hijack #Fortinet firewalls
https://securityaffairs.com/174117/hacking/fortinet-fortios-zero-day-exploited.html
#securityaffairs #hacking
#Fortinet warned today that attackers are exploiting another now-patched zero-day bug in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks. #CyberAlerts #zeroday https://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-zero-day-exploited-to-hijack-firewalls/
