Fortinet CISO Carl Windsor shares progress on CISA’s Secure by Design Pledge, from automatic updates and product hardening to greater transparency. Source link Author: Fortinet Article used for cyber security disclosure.
Fortinet CISO Carl Windsor shares progress on CISA’s Secure by Design Pledge, from automatic updates and product hardening to greater transparency. Source link Author: Fortinet Article used for cyber security disclosure.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-60004 Gitea Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal…
Update June 22, 2026:CISA has updated this Alert to incorporate the link to Fortinet’s recent guidance on this activity. CISA is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials. This activity,…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant…
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability These types…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability These types of vulnerabilities are…
New research shows organizations are moving from one-size-fits-all awareness training to behavior-based security programs that reinforce secure decisions, reduce risk, and improve workforce readiness. Source link Author: Fortinet Article used for cyber security disclosure.
FortiGuard Labs analyzes Evooo1Bot, a modular Linux botnet targeting internet-facing devices with DDoS, SSH attacks, CVE exploits, and SOCKS relays Source link Author: Fortinet Article used for cyber security disclosure.
