The firewall admin signs in on a Monday and the password is wrong. It worked on Friday. The admin list now holds an account called something like forticloud-sync that nobody remembers creating. Someone knew a password that still worked. On 6 October 2026, the FBI and the US Secret Service published joint advisory JCSA-20261006-01 on FortiBleed, "an active, global credential-compromise campaign" against internet-facing FortiGate firewalls and SSL VPN gateways. SOCRadar, cited

On May 31, 2023, Progress released a security advisory for their MOVEit Transfer application detailing a SQL injection vulnerability leading to remote code execution. Customers were urged to update to the latest version. This vulnerability, CVE-2023-34362, was believed to have been exploited in the wild as a 0-day dating back at least 30 days. Threat intelligence reports suggested that exploitation activity could be traced back to 2021. The attacks were attributed to the cl0p

The cyber threat landscape is a constantly evolving space where new vulnerabilities are discovered and old ones are patched up. However, the cat-and-mouse game between attackers and defenders often leads to gaps in security, which can be ruthlessly exploited. A recent example of this is the discovery of a critical heap-based buffer overflow vulnerability in Fortinet FortiOS and FortiProxy SSL-VPN devices, dubbed CVE-2023-27997. This post aims to delve into the details of this

Since September 2022, cybersecurity threats have taken a new turn with the advent of the Royal ransomware variant. These cybercriminals have successfully infiltrated numerous U.S. and international organizations, causing significant disruptions and financial loss. This variant, which employs its custom-made file encryption program, is believed to have evolved from earlier versions that used 'Zeon' as a loader. Its modus operandi is consistent yet effective: after penetrating

In today's digital age, businesses of all sizes face an ever-growing number of cybersecurity threats. Protecting sensitive information and ensuring data privacy has become a top priority for organizations worldwide. One of the most effective ways to achieve this is by implementing Multi-Factor Authentication (MFA). In this blog post, we'll discuss the importance of MFA for businesses, outline its benefits, and provide a step-by-step guide to getting started. The Importance of