Hosted on MSN

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

Fortinet warned customers about a critical FortiSIEM bug that could allow an unauthenticated attacker to execute unauthorized commands, and said working exploit code for the flaw has been found in the ...
BleepingComputer

New Fortinet RCE flaw in SSL VPN likely exploited in attacks

Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks. The flaw (tracked as CVE-2024-21762 / FG-IR-24-015) received a ...
Ars Technica

Fortinet SSL-VPN or Windows VPN

I already setup the Fortigate to do SSL-VPN using Active Directory (LDAP) for authentication. It works great, but requires a Fortinet client installation and some ...
Infosecurity-magazine.com

Fortinet Addresses Critical FortiGate SSL-VPN Vulnerability

Network security solution provider Fortinet has patched a critical bug in its FortiOS and FortiProxy SSL-VPN software that could be exploited to hijack equipment. The vulnerability, identified as ...
BleepingComputer

Fortinet fixes critical vulnerabilities in SSL VPN and web firewall

Fortinet has fixed multiple severe vulnerabilities impacting its products. The vulnerabilities range from Remote Code Execution (RCE) to SQL Injection, to Denial of Service (DoS) and impact the ...
Threatpost

FBI: APTs Actively Exploiting Fortinet VPN Security Holes

Three security vulnerabilities in the Fortinet SSL VPN are being used to gain a foothold within networks before moving laterally and carrying out recon. The FBI and the Cybersecurity and ...
techtarget

Threat activity increasing around Fortinet VPN vulnerability

Exploitation activity is ramping up against a Fortinet SSL-VPN vulnerability, according to several reports. In December, Fortinet disclosed that a critical flaw, tracked as CVE-2022-42475, had been ...
bankinfosecurity

Hackers Hit Unpatched Pulse Secure and Fortinet SSL VPNs

Hackers in recent days have been hunting for SSL VPNs manufactured by both Fortinet and Pulse Secure that have yet to be updated to fix serious security flaws, security experts warn. See Also: When ...
Light Reading

Fortinet Integrates SSL & IPSec VPNs

SUNNYVALE, Calif. -- Fortinet – the confirmed market leader in Unified Threat Management and only provider of ASIC-accelerated, network-based antivirus firewall systems for real-time network ...
techtarget

Fortinet confirms VPN vulnerability exploited in the wild

A critical zero-day vulnerability in Fortinet's SSL-VPN has been exploited in the wild in at least one instance. Fortinet issued an advisory Monday detailing the heap-based buffer overflow flaw, ...
Ars Technica

Fortinet SSL VPN Problem

I'll work with Fortinet support on this also, but thought I would ask you guys in case you had run into this. We have a user that connects from home via the Fortinet SSL VPN. It had been working then ...