News

Spike in Fortinet VPN brute-force attacks raises zero-day concerns

A massive spike in brute-force attacks targeted Fortinet SSL VPNs earlier this month, followed by a switch to FortiManager, ...

Fortinet VPNs under attack from potential zero-day - FortiSIEM security tools also at risk, so be on your guard

In early August 2025, researchers from GreyNoise first observed a significant spike in brute-force attacks against Fortinet ...

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

An unauthenticated attacker can abuse this flaw by crafting a CLI request and then executing arbitrary commands on the ...
Style de star on MSN9d

Research Links Threat Actor Activity to Future Vulnerabilities

Spikes in attacker activity often precede new cyber vulnerabilities. In 80 percent of cases we analyzed, significant spikes ...

Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

Fortinet is warning about a remote unauthenticated command injection flaw in FortiSIEM that has in-the-wild exploit code, ...
Infosecurity Magazine2d

Fortinet Warns Exploit Code Available for Critical Vulnerability

Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit ...
The Hacker News3d

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Coordinated brute-force attacks hit Fortinet SSL VPNs and FortiManager, involving 780+ malicious IPs from U.S., Canada, ...
Fudzilla9d

Thousands of ASUS routers backdoored without malware

GreyNoise and Sekoia warn  Thousands of ASUS routers have been  compromised with persistent backdoors in what appears to be a ...
The Hacker News3d

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ...
Infosecurity-magazine.com15d

Hackers Regularly Exploit Vulnerabilities Before Public Disclosure

Many hackers are opportunistic and often attempt to exploit security gaps to launch an attack days before a vulnerability is disclosed. According to a new report published on July 31 by GreyNoise, ...
Computer Weekly9dOpinion

Diversity Think Tank: Stepping back? A look at DEI in the current climate

Even without recent news in the US, diversity, equity and inclusion (DEI) initiatives were dialled back in UK businesses last ...
CSOonline29d

Threat actors scanning for apps incorporating vulnerable Spring Boot ...

GreyNoise said over 2,000 IP addresses have scanned for Spring Boot Actuator endpoints in the past 90 days. Of them, 1,582 IPs specifically targeted the /health endpoints, commonly used to detect ...