Complete config files and VPN passwords in plain text for Fortinet devices have been released by a new group. heise security takes a look at the data set. Usually, you'll get only small gifts in ...

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and steal system configuration files. The two vulnerabilities ...

Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.

A credential-stealing Trojan disguised as a routine Fortinet security patch has been hitting enterprise networks, quietly siphoning saved passwords from Chrome and Firefox on corporate workstations.

Fortinet, a maker of network security software, has kept a critical vulnerability under wraps for more than a week amid reports that attackers are using it to execute malicious code on servers used by ...

Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability, tracked as CVE-2026-24858, and says it has mitigated the zero-day attacks ...

Organizations running Fortinet FortiWeb, the company’s web application firewall, face an immediate threat: a single crafted ...