Organization
15 Interestana reports mention Fortinet, newest first. Each is summarised from the original reporting and links back to its publisher.
The Federal Bureau of Investigation (FBI) has issued a public service announcement (PSA) detailing ongoing cyberattacks, termed FortiBleed, which are actively targeting internet-exposed Fortinet FortiGate firewalls and Secure Sockets Layer (SSL) Virtual Private Network (VPN) gateways.
This week's cybersecurity landscape is marked by the active exploitation of zero-day vulnerabilities in critical network infrastructure, specifically impacting NetScaler Application Delivery Controller (ADC) and FortiMail secure email gateways. These vulnerabilities represent significant threats as they are being leveraged…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical security vulnerability affecting Fortinet's FortiMail email security gateway to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 7, 2024.
Fortinet has issued a critical warning to its customers regarding a significant vulnerability within its FortiMail email security gateway product. This vulnerability, officially designated as CVE-2026-104286, is reportedly being actively exploited in the wild as a zero-day attack.
A critical vulnerability in the Orkes Conductor workflow platform, identified as CVE-2026-58138, is currently being exploited in real-world attacks, as reported by Fortinet. This vulnerability carries a high severity rating, with a CVSS v3.1 score of 9.8 and a CVSS…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday, August 28, 2024, officially added three significant cybersecurity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws impact widely used products from major technology vendors Cisco, Citrix, and Fortinet.
Cybersecurity and intelligence agencies from South Korea and the United States issued a joint warning on May 15, 2024, detailing ongoing Gunra ransomware attacks that are targeting critical infrastructure sectors and organizations worldwide.
The Cybersecurity and Infrastructure Security Agency (CISA) issued a directive on Thursday, compelling federal agencies to immediately address two critical vulnerabilities within the Fortinet FortiSandbox threat detection platform. These vulnerabilities, identified as CVE-2024-3657 and CVE-2024-3658, are reportedly being actively exploited…
The extensive FortiBleed credential theft campaign has been directly linked to the INC and Lynx ransomware operations. This connection suggests that the credentials stolen from Fortinet systems were intended to facilitate future network intrusions by these ransomware groups.
The Ousaban banking trojan, originating from Brazil, has been identified as targeting Windows users in Spain and Portugal. Fortinet's FortiGuard Labs detected this campaign in May 2026. The malware employs a sophisticated phishing tactic, presenting users with a PDF file…
A Russian-speaking threat actor, motivated by financial gain, is behind a credential-harvesting operation named FortiBleed, which has targeted over 430,000 FortiGate firewalls worldwide. This campaign, active since February 2026, involves collecting credential lists, identifying exposed services, attempting brute-force logins…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Thursday to Fortinet customers using FortiGate appliances, advising them to implement security measures against active exploitation targeting numerous devices.
Tens of thousands of Fortinet firewalls, utilized by numerous major global companies, have allegedly been compromised by a Russian-speaking cybercriminal group. The attackers are reportedly exploiting previously known passwords to gain unauthorized access to these network security devices.
Attackers are actively exploiting three vulnerabilities in Fortinet FortiSandbox appliances, as reported by threat intelligence firm Defused Cyber. The firm observed exploitation attempts for CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 within the past 24 hours.
Fortinet released a security update on March 18, 2026, to address a critical command injection vulnerability in FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS WEB UI, tracked as CVE-2026-25089 with a CVSS score of 9.1.