Bleeping Computer

Fortinet warns of auth bypass zero-day exploited to hijack firewalls

Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks. This security flaw (tracked as ...
CRN

Fortinet Confirms Exploitation Of ‘Critical’ Vulnerability In FortiOS, FortiProxy

The confirmation comes after Arctic Wolf researchers said that ‘mass exploitation’ of the vulnerability—which impacts FortiGate firewalls—is ‘likely.’ Fortinet confirmed Tuesday that a ...
Infosecurity-magazine.com

Fortinet Confirms Critical Zero-Day Vulnerability in Firewalls

Fortinet has disclosed a new critical zero-day vulnerability affecting some of its FortiGate firewalls. In a security advisory published on January 14, FortiGuard Labs revealed a new authentication ...
ITWire

Fortinet firewalls hit with new zero-day attack, older data leak

On Wednesday, January 15, 2025, a threat actor named “Belsen Group” published a trove of Fortinet FortiGate firewall data on the dark web, allegedly from 15,000 organisations. The data released ...
Bleeping Computer

Fortinet: New FortiOS RCE bug "may have been exploited" in attacks

Fortinet says a critical FortiOS SSL VPN vulnerability that was patched last week "may have been exploited" in attacks impacting government, manufacturing, and critical infrastructure organizations.