Fortinet FortiMail zero-day CVE-2026-104286 lets unauthenticated attackers write arbitrary files to email gateways and plant ...

Explore the latest news, real-world incidents, expert analysis, and trends in Fortinet — only on The Hacker News, the leading ...

Fortinet is a Strong Buy due to raised guidance, robust data center traction, and superior product economics versus peers.

A PAYLOAD ransomware incident weaponized Microsoft Active Directory Group Policy to disrupt a firms computers without encrypting files.

Pulse — independent third-party profile of a public API surface, by API Evangelist. APIs for Ivanti Pulse Secure (formerly Pulse Secure), providing secure remote access VPN, network access control, ...

2026年9月第三週的資安新聞熱點，聚焦歐盟CRA通報義務上路、AI安全爭議升溫與個資保護監管強化；針對網路、應用程式與端點的漏洞利用攻擊持續頻傳，國內外亦接連傳出企業遭駭，特別是義大利醫療機構遭勒索軟體攻擊造成多項醫療服務中斷近兩週，商周集團網站復原情形，亦突顯資安事件對營運韌性的實際衝擊 ...

An alleged private RCE exploit for Fortinet FortiGate SSL VPNs reportedly targets FortiOS 7.2.x and 7.4.x, but remains unverified.

泰國大型寬頻公司3BB（Triple T Broadband）驚傳遭到入侵，威脅情報公司Hunt.io藉由駭客不慎暴露的公開資料夾發現此事，並指出駭客為了能持續存取該公司內部環境，濫用遠端管理工具MeshCentral建置存取管道 ...

Researchers have uncovered an exposed attacker-controlled staging server containing evidence of a wide-ranging intrusion targeting 3BB, the consumer brand operated by Thailand’s Triple T Broadband.

A credential-based attack is an intrusion in which the attacker authenticates with a legitimate, stolen username and password rather than exploiting a software flaw — which means there is no malware ...

The Department of Justice and FBI announced on August 26 that they had seized three internet domains hard-coded into two Chinese state-sponsored hacking platforms, instantly disabling an eight-year ...

Your SD-WAN orchestrator does not just run software — it holds the routing policies, VPN tunnels, device credentials, and cryptographic keys for every branch office and edge device your enterprise ...