Microsoft warns of 66 flaws to fix for this Patch Tuesday, and two are under active attack Patch Tuesday Stealthy Falcon swoops on WebDAV and Redmond's even patching IE! Patches10 Jun 2025 |
Old Fortinet flaws under attack with new method its patch didn't prevent Infosec In Brief PLUS: Chinese robodogs include backdoor; OpenAI helps spammer; A Dutch data disaster; And more! Security14 Apr 2025 | 6
New kids on the ransomware block channel Lockbit to raid Fortinet firewalls It's March already and you haven't patched? Cyber-crime14 Mar 2025 |
Snake Keylogger slithers into Windows, evades detection with AutoIt-compiled payload Because stealing your credentials, banking info, and IP just wasn’t enough Research18 Feb 2025 | 8
FortiGate config leaks: Victims' email addresses published online Experts warn not to take SNAFU lightly as years-long compromises could remain undetected Cyber-crime23 Jan 2025 | 8
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day Seven days after disclosure and little action taken, data shows Patches21 Jan 2025 | 3
Fortinet: FortiGate config leaks are genuine but misleading Competition hots up with Ivanti over who can have the worst start to a year Cyber-crime17 Jan 2025 | 5
Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used Updated Ransomware 'not off the table,' Arctic Wolf threat hunter tells El Reg Networks14 Jan 2025 | 26
China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer No word on when or if the issue will be fixed Security19 Nov 2024 | 2
Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost Plus a bonus hard-coded local API key Patches14 Nov 2024 |
Winos4.0 abuses gaming apps to infect, control Windows machines 'Multiple' malware samples likely targeting education orgs Security08 Nov 2024 | 6
FortiManager critical vulnerability under active attack Updated Security shop and CISA urge rapid action Cybersecurity Month23 Oct 2024 | 7
Thousands of Fortinet instances vulnerable to actively exploited flaw No excuses for not patching this nine-month-old issue Cybersecurity Month14 Oct 2024 | 8
CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame Usual three-week window to address significant risks to federal agencies applies Cybersecurity Month10 Oct 2024 |
Fortinet admits miscreant got hold of customer data in the cloud That would explain this 440GB leak, then Cyber-crime13 Sep 2024 | 5
Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets Malware logs users' keystrokes, pilfers credentials, exfiltrates data Research05 Aug 2024 | 15
China's FortiGate attacks more extensive than first thought Dutch intelligence says at least 20,000 firewalls pwned in just a few months Cyber-crime12 Jun 2024 | 13
Microsoft squashes SmartScreen security bypass bug exploited in the wild Patch Tuesday Plus: Adobe, SAP, Fortinet, VMware, Cisco issue pressing updates Security10 Apr 2024 | 22
More than 133,000 Fortinet appliances still vulnerable to month-old critical bug A huge attack surface for a vulnerability with various PoCs available Patches18 Mar 2024 | 2
Fortinet's week to forget: Critical vulns, disclosure screw-ups, and that toothbrush DDoS attack claim An orchestra of fails for the security vendor Cyber-crime09 Feb 2024 | 6
Double trouble for Fortinet as it issues critical FortiSIEM vulns Updated Please stand by 73 hours for vendor response...* Patches06 Feb 2024 | 3
You've patched right? '340K+ Fortinet firewalls' wide open to critical security bug That's a vulnerability that's under attack, fix available ... cancel those July 4th plans, perhaps? Black Hat and DEF CON03 Jul 2023 | 13
A (cautionary) tale of two patched bugs, both exploited in the wild One affects VMware's monitoring tool and the other TP-Link routers Patches21 Jun 2023 | 8
Fortinet squashes hijack-my-VPN bug in FortiOS gear And it's already being exploited in the wild, probably Patches12 Jun 2023 | 2
Fortinet's latest firewall promises hyperscale security while sipping power Need more speed? Just stuff it with custom ASICs Energy Efficient Datacenters12 Apr 2023 | 4
Microsoft: Patch this severe Outlook bug that Russian miscreants exploited Patch Tuesday Plus: Fixes for SAP, Adobe. Android, Chrome Patches14 Mar 2023 | 38
Fortinet's latest ASIC promises 2.5Gbps of SSL inspection at the edge New entry-level firewalls to follow Systems07 Feb 2023 | 9
Fortinet's cloud firewall ditches custom ASICs for Amazon's Graviton CPUs You might say they've Arm-ed their security suite for battle Off-Prem29 Nov 2022 |
China-linked Budworm burrows hole in US legislature systems In brief Also, Senator Warren says banks need to grow the Zelle up, an AirTag does some good – if you’re a Democrat, and more Security17 Oct 2022 | 7
Fortinet warns of critical flaw in its security appliance OSes, admin panels Naturally, they're already under attack – so you know what to do next Patches11 Oct 2022 | 15
Fortinet's latest hyperscale kit packs 2.4Tbit/sec of firewall into a 4U chassis And it only took 16 ASICs Networks04 Aug 2022 | 2
World Economic Forum wants a global map of online crime RSA Conference Will cyber crimes shrug off Atlas Initiative? Objectively, yes Cyber-crime10 Jun 2022 | 7
Watch out for phishing emails that inject spyware trio You wait for one infection and then three come along at once Research01 Jun 2022 | 13
Fortinet's latest firewall is like your kids' music – you're probably not ready for it, yet Unless you happen to be in healthcare or finance or using AI on personal info or... Networks05 May 2022 | 6
Data-wiper malware strains surge as Ukraine battles ongoing invasion Besides files being erased, another thing being deleted: Any sense this is a coincidence Research29 Apr 2022 | 11
Interpol: We can't arrest our way out of cybercrime Especially when gangs are better funded than local police Cyber-crime29 Apr 2022 | 11
Enemybot botnet uses Gafgyt source code with a sprinkling of Mirai Keksec malware used for DDoS attacks, may spread to cryptomining, Fortinet says Security13 Apr 2022 | 1
Fortinet says it’s all about the security ASICs Xie claims his custom chips lower infosec computing costs by up to 10x Security10 Mar 2022 | 9
Researchers find high-severity command injection vuln in Fortinet's web app firewall Updated Mitigation: Don't let randomers from the internet log in to your firewall Security18 Aug 2021 |
Fortinet's security appliances hit by remote code execution vulnerability Cure worse than the disease for anyone with the 'fgfmsd' daemon activated Security20 Jul 2021 | 1
The seven deadly sins letting hackers hijack America's govt networks: These unpatched bugs leave systems open 'Unauthorized access to elections support systems' detected tho 'no evidence to date that integrity of elections data has been compromised' Security12 Oct 2020 | 7
This week, we give thanks to Fortinet for reminding us what awful crypto with hardcoded keys looks like Roundup Plus more from the world of infosec Security28 Nov 2019 | 33
Cyber-sec biz Fortinet coughs up $545,000 after 'flogging' rebadged Chinese kit to Uncle Sam – but why so low? We may be able to explain Rogue employee takes blame, seems he ain't no Fortinet son Security17 Apr 2019 | 8
Hungry, hungry network firms: Ericsson, NXP chow down, Ciena on the prowl Also: New gear out, plus ENISA overlooks squirrels Networks10 Sep 2018 | 1
NSA's crummy crypto crop Suite B binned, and other network nuggets NEC cavorts with 5G, Arita finds its Mojo, and much more Networks03 Aug 2018 | 4
New Zealand school on naughty step after ransomware failure Fortinet to lock the stable door, horse heads for horizon Security02 Aug 2018 | 15
'007' code helps stop Spectre exploits before they exist Singaporeans boffins offer Spectre-protector as Fortinet ponders Android inoculation Security17 Jul 2018 | 12
Pinging admins: Here comes your packet of networking news Roundup Blockchain comes to the cable biz, acquisitions, Red Hat Summit and more Networks11 May 2018 | 6
It's 2017 and someone's probably still using WINS naming. If so, stop Microsoft's NetBIOS naming is vulnerable: use DNS instead Security15 Jun 2017 | 32
Hello, Fortinet? Could you patch these vulns please? Oh, and CERT's left a message or two Channel07 Sep 2016 | 2
Fortinet axes two per cent of workforce, chops 100 sales, ad staff, execs Just a re-alignment of talent, no need to panic, move along, nothing to see here ... Channel05 Aug 2016 | 1
Cisco, Fortinet cosy up to NATO for infosharing The l33tz will shake and quake in their boots Security01 Mar 2016 | 1
Thought you were safe from the Fortinet SSH backdoor? Think again More devices are dodgy and hackers are cruising for targets Security23 Jan 2016 | 20
Fortinet tries to explain weird SSH 'backdoor' discovered in firewalls Update your firmware or suffer the consequences Networks12 Jan 2016 | 34
Sophos, Fortinet settle patent lawsuit, allegations of staff poaching No admission of malfeasance either way Channel09 Dec 2015 | 1
Fortinet rides to troubled Meru's rescue Adding cloudy WLAN to wireless security portfolio Channel28 May 2015 | 1
NOT OK GOOGLE: Android images can conceal code It's been fixed, but hordes won't have applied the upgrade Security22 Oct 2014 | 33
We told you jailbreaking your iThing was dangerous Ad revenue looted from 75,000 infected iOS fondelslabs Security13 Aug 2014 | 26
Fortinet fawns over fast-if-unfashionable ASIC How else can you get a firewall to Terabit-per-second performance? Networks24 Jul 2014 | 7
HyTrust pockets more dough, ready to expand virty platform coverage Intel Capital and Fortinet kick in $6.5m Virtualization26 Aug 2013 |
Fortinet nabs wily Coyote and its slice of security appliance cake Or perhaps we mean pie. Made of meaty customers, anyway Security26 Mar 2013 |
IBM sniffs around Fortinet But Big Blue is late to the converged infrastructure game Networks01 Nov 2010 | 2