Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,167 stories synthesized.
Fortinet has disclosed a path traversal vulnerability in the File Content Extraction connector of FortiSOAR, allowing authenticated remote attackers to traverse directories.
Fortinet has disclosed a reflected cross-site scripting vulnerability in FortiSandbox and FortiSandbox Cloud, tracked as FG-IR-26-109, with a CVSSv3 score of 4.9.
Fortinet has disclosed a stored password vulnerability in its FortiSOAR security orchestration platform that could allow an authenticated attacker to retrieve clear-text LDAP service account credentials.
Fortinet has disclosed a path traversal vulnerability in the CLI of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow privileged attackers to write or delete arbitrary files.
Fortinet has disclosed a vulnerability in FortiSOAR that allows authenticated attackers to retrieve stored connector passwords by modifying the server address in connector configuration.
Fortinet disclosed a heap-based buffer overflow in the oftpd daemon of FortiAnalyzer Cloud that could allow remote unauthenticated attackers to execute arbitrary code, though exploitation requires significant effort.
Fortinet has disclosed a cleartext transmission vulnerability in FortiSOAR that could allow authenticated attackers to view passwords in API responses for Secure Message Exchange and Radius queries.
Fortinet disclosed a vulnerability in FortiSandbox and FortiSandbox PaaS that allows authenticated administrators to read LDAP server credentials via client-side inspection.
Fortinet has disclosed an SQL injection vulnerability in FortiClientEMS that could allow authenticated attackers to execute arbitrary SQL queries on the backend database.
Fortinet has disclosed a critical path traversal vulnerability in FortiSandbox's JRPC API that allows unauthenticated attackers to bypass authentication and escalate privileges.
Fortinet has disclosed an SQL injection vulnerability affecting FortiAnalyzer, FortiManager, and their cloud variants, allowing authenticated privileged attackers to execute unauthorized code or commands.
Fortinet disclosed an open redirect vulnerability in FortiNAC-F that allows privileged attackers to redirect users to arbitrary websites via a crafted CSV file import.
Fortinet disclosed an integer overflow vulnerability in FortiWeb that could allow privileged authenticated attackers to cause denial of service via crafted HTTP requests.
Fortinet disclosed a hardcoded symmetric encryption key vulnerability in FortiClientEMS, rated CVSS 5.2, that allows attackers with an encrypted database dump to decrypt it using the embedded key.
Attackers are actively exploiting CVE-2026-3584, a critical unauthenticated Remote Code Execution vulnerability in the Kali Forms WordPress plugin, with over 312,000 blocked exploit attempts.
Proofpoint reports a surge in mailbox rule abuse, with 10% of breached Microsoft 365 accounts in Q4 2025 having malicious rules created within seconds of initial access.
A new Android banking trojan named Mirax is spreading across Europe via fake streaming apps, combining remote access, keylogging, and residential proxy capabilities to compromise over 200,000 accounts.
Check Point's latest threat intelligence bulletin details a major LAPD data breach, a ransomware attack on Dutch healthcare vendor ChipSoft, and active exploitation of critical vulnerabilities in Ivanti, Adobe, and Fortinet.
The FBI and Indonesian law enforcement have taken down the W3LL phishing network, a sophisticated operation that caused over $20 million in fraud by selling a custom phishing kit and compromised accounts through a members-only marketplace.
The Department of Justice announced Operation Masquerade, a court-authorized takedown of a Russian GRU Unit 26165 (APT28) DNS hijacking network that compromised thousands of TP-Link routers across 23 states since 2024.
Google has rolled out Device Bound Session Credentials (DBSC) in Chrome 146, cryptographically binding authentication sessions to hardware-backed keys to render stolen session cookies useless against infostealers.
A previously undocumented remote access trojan named STX RAT has been discovered targeting the financial services sector, employing multi-stage scripts, XXTEA encryption, and in-memory execution to evade detection.
Bitcoin Depot disclosed a cyber-attack on its internal systems that led to the theft of 50.903 Bitcoin (~$3.66M) on March 23, 2026.
A supply chain attack on Smart Slider 3 Pro version 3.5.1.35 for WordPress distributed a pre-authentication remote command execution backdoor through the official update channel for approximately six hours before detection.