Latest FortiOS news

New Fortinet RCE bug is actively exploited, CISA confirms

CISA confirmed today that attackers are actively exploiting a critical remote code execution (RCE) bug patched by Fortinet on Thursday.
- Sergiu Gatlan
- February 09, 2024
- 04:02 PM
- 3
New Fortinet RCE flaw in SSL VPN likely exploited in attacks

Fortinet is warning that a new critical remote code execution vulnerability in FortiOS SSL VPN is potentially being exploited in attacks.
- Lawrence Abrams
- February 08, 2024
- 06:11 PM
- 1
Fortinet warns of critical RCE flaw in FortiOS, FortiProxy devices

Fortinet has disclosed a critical severity flaw impacting FortiOS and FortiProxy, allowing a remote attacker to perform arbitrary code execution on vulnerable devices.
- Bill Toulas
- July 12, 2023
- 10:40 AM
- 0
300,000+ Fortinet firewalls vulnerable to critical FortiOS RCE bug

Hundreds of thousands of FortiGate firewalls are vulnerable to a critical security issue identified as CVE-2023-27997, almost a month after Fortinet released an update that addresses the problem.
- Bill Toulas
- July 03, 2023
- 07:54 AM
- 1
Fortinet: New FortiOS RCE bug "may have been exploited" in attacks

Fortinet says a critical FortiOS SSL VPN vulnerability that was patched last week "may have been exploited" in attacks impacting government, manufacturing, and critical infrastructure organizations.
- Sergiu Gatlan
- June 12, 2023
- 05:53 PM
- 0
Fortinet: New FortiOS bug used as zero-day to attack govt networks

Unknown attackers used zero-day exploits to abuse a new FortiOS bug patched this month in attacks targeting government and large organizations that have led to OS and file corruption and data loss.
- Sergiu Gatlan
- March 13, 2023
- 06:38 PM
- 0
Fortinet warns of new critical unauthenticated RCE vulnerability

Fortinet has disclosed a "Critical" vulnerability impacting FortiOS and FortiProxy, which allows an unauthenticated attacker to execute arbitrary code or perform denial of service (DoS) on the GUI of vulnerable devices using specially crafted requests.
- Bill Toulas
- March 08, 2023
- 02:25 PM
- 0
New Boldmove Linux malware used to backdoor Fortinet devices

Suspected Chinese hackers exploited a recently disclosed FortiOS SSL-VPN vulnerability as a zero-day in December, targeting a European government and an African MSP with a new custom 'BOLDMOVE' Linux and Windows malware.
- Bill Toulas
- January 20, 2023
- 11:02 AM
- 0
Fortinet: Govt networks targeted with now-patched SSL-VPN zero-day

Fortinet says unknown attackers exploited a FortiOS SSL-VPN zero-day vulnerability patched last month in attacks against government organizations and government-related targets.
- Sergiu Gatlan
- January 12, 2023
- 11:05 AM
- 0
Fortinet says SSL-VPN pre-auth RCE bug is exploited in attacks

Fortinet urges customers to patch their appliances against an actively exploited FortiOS SSL-VPN vulnerability that could allow unauthenticated remote code execution on devices.
- Lawrence Abrams
- December 12, 2022
- 12:15 PM
- 1