Fortinet Auth Bypass Vulnerability Allows Attackers to Gain Full Control

Fortinet Auth Bypass Vulnerability Allows Attackers to Gain Full Control

SoupDealer Malware slipped past every public sandbox, antivirus solution, and even enterprise EDR/XDR platforms. Next headache!

SharePoint Corporate users:

SharePoint Corporate users:

Tactic:. The attackers sent sophisticated phishing emails impersonating U.S. State Department officials, encouraging victims to generate and share app-specific passwords-a lesser-known security loophole in Gmail.

Pegasus next generation corporate spyware: Graphite. #cybersecurity #government #Israel

Exposed Data breach includes Amazon, Apple, Nintendo, Snapchat, Spotify, X, WordPress, Yahoo, and many other types of login info.

Microsoft identified over 394 000 Windows computers globally infected by Lumma malware. Microsoft, Europol, and international partners have disrupted Lumma’s infrastructure, cutting off communications between the malicious tool and victims #maas

Developers and organizations running Node.js are strongly urged to update to the latest patched versions immediately. #cybersecurity

Genius!!! (unless the super computer lifespan is only a few years and the cost to put in orbit is greater to the resources needed on earth)

Attackers with knowledge of existing admin accounts can access devices as legitimate administrators, completely bypassing the authentication process. #cybersecurity

Fortinet has observed the threat actors deploying malware on hacked devices, adding cron jobs designed to harvest credentials, and dropping scripts to scan the victims' networks. #cybersecurity #fortinet

Las funciones de acceso remoto de los routers afectados han permitido a los delincuentes hacer que los dispositivos acaben formando parte de una botnet (red de equipos infectados). #cybersecurity

The vulnerability, tracked as CVE-2025-29824, was tagged by Microsoft as exploited in a limited number of attacks and patched during last month's Patch Tuesday.

Attackers can deploy a multi-stage attack chain consisting of a .NET loader malware functioning as a WebShell, followed by a malicious IIS native module that provides persistent control over the compromised server

These devices, which were released many years back and no longer receive security updates from their vendors, are vulnerable to external attacks leveraging publicly available exploits to inject persistent malware.

An attacker can chain these vulnerabilities to make a sensitive system directory writable, elevate their privileges to SMA administrator, and write an executable file to a system directory. This chain results in root-level RCE

A successful exploit could allow the attacker to upload files, perform path traversal, and execute arbitrary commands with root privileges.

This vulnerability allows attackers to map URLs to unintended filesystem locations, potentially leading to code execution or source code disclosure.