Vulnerable Fortinet News Today : Breaking News, Live Updates & Top Stories | Vimarsana

The attack workflow starts by exploiting an old Fortigate VPN server flaw. (Source: Kaspersky) The gang behind ransomware dubbed "Cring," which has waged a series of attacks this year, is exploiting a Fortinet VPN server vulnerability that the company patched in 2019, according to a report from the security firm Kaspersky that analyzes one attack in Europe. The researchers report that the ongoing campaign, which began in January, exploits the Fortigate VPN server flaw tracked as CVE-2018-13379 to gain initial access. Once in the victim's environment, the attackers encrypt data and then demand...

The attack workflow starts by exploiting an old Fortigate VPN server flaw. (Source: Kaspersky) The gang behind ransomware dubbed "Cring," which has waged a series of attacks this year, is exploiting a Fortinet VPN server vulnerability that the company patched in 2019, according to a report from the security firm Kaspersky that analyzes one attack in Europe. The researchers report that the ongoing campaign, which began in January, exploits the Fortigate VPN server flaw tracked as CVE-2018-13379 to gain initial access. Once in the victim's environment, the attackers encrypt data and then demand...

FBI and CISA: APT Groups Targeting Government Agencies May 5, 2021 Twitter Get Permission The U.S. Cybersecurity and Infrastructure Security Agency and the FBI warn that unidentified nation-state actors are scanning for three vulnerabilities in Fortinet's operating system, FortiOS, to likely target government and private sector companies for cyberespionage. In a joint alert released on Friday, the agencies note nation-state actors are scanning for FortiOS vulnerabilities tracked as CVE-2018-13379, CVE-2020-12812, CVE-2019-5591 for initial attacks. The alert does not disclose details of the ...