Tag: FortiOS

Mandiant detects suspected Chinese BOLDMOVE hackers exploiting FortiOS vulnerability across federal entities

Mandiant detects suspected Chinese BOLDMOVE hackers exploiting FortiOS vulnerability across federal entities

Threat intelligence firm Mandiant disclosed that it is tracking a suspected China-nexus campaign called ‘BOLDMOVE’ believed to have exploited a recently announced vulnerability in Fortinet's FortiOS SSL-VPN, CVE-2022-42475, as a zero-day. Evidence suggests the exploitation was occurring as early as…

Heap-based buffer overflow vulnerability in Fortinet FortiOS SSL-VPN appliances, patches available

Heap-based buffer overflow vulnerability in Fortinet FortiOS SSL-VPN appliances, patches available

Fortinet announced Monday that the presence of a heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. The exploitation of the vulnerability could allow a…

Following critical authentication bypass breach in Fortinet products, Cyble finds hackers selling access over the darkweb

Following critical authentication bypass breach in Fortinet products, Cyble finds hackers selling access over the darkweb

Cyble researchers said that multiple versions of Fortinet products have been affected by an authentication bypass using an alternate path or channel vulnerability in FortiOS, FortiProxy, and FortiSwitchManager. While during routine monitoring, researchers at Cyble observed a hacker distributing multiple…

CISA, FBI, HHS issue warning of Hive RaaS hackers continuing to target critical infrastructure, especially HPH sector

CISA, FBI, HHS issue warning of Hive RaaS hackers continuing to target critical infrastructure, especially HPH sector

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Health and Human Services (HHS) rolled out on Thursday a joint cybersecurity advisory (CSA) to disseminate known Hive IOCs (indicators of compromise) and…