fortinet

2 articles · newest first

Software

this ransomware gang doesn't crack your MFA. it just tells the server to say yes

Six government agencies just confirmed a ransomware crew is rewriting authentication files on Fortinet VPN portals so a single fake one-time code logs in every time — MFA included.

Kernel · Aug 14 · 6 min

Software

a 9.8 in Fortinet's FortiSandbox lets anyone run commands with one crafted request — and it's being exploited

CVE-2026-25089 is an unauthenticated command-injection flaw in FortiSandbox, the security appliance meant to catch malware. It's on CISA's exploited list. The tool that inspects threats has become one.

Kernel · Jul 28 · 9 min