#fortigate — Public Fediverse posts

How AI Assistants are Moving the Security Goalposts

https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

#JamiesonO'Reilly #ALittleSunshine #LatestWarnings #TheComingStorm #SauravHiremath #RiskyBusiness #SimonWillison #OrcaSecurity #WebFraud2.0 #AIassistant #JamesWilson #MattSchlict #LauraEllis #agenticAI #AmazonAWS #Anthropic #FortiGate #microsoft #RoiNisimi #SummerYue #AIagents #ClawdBot #grith.ai #Moltbook #OpenClaw #CJMoses #Copilot #Moltbot #Claude

How AI Assistants are Moving the Security Goalposts

https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

#JamiesonO'Reilly #ALittleSunshine #LatestWarnings #TheComingStorm #SauravHiremath #RiskyBusiness #SimonWillison #OrcaSecurity #WebFraud2.0 #AIassistant #JamesWilson #MattSchlict #LauraEllis #agenticAI #AmazonAWS #Anthropic #FortiGate #microsoft #RoiNisimi #SummerYue #AIagents #ClawdBot #grith.ai #Moltbook #OpenClaw #CJMoses #Copilot #Moltbot #Claude

How AI Assistants are Moving the Security Goalposts

https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

#JamiesonO'Reilly #ALittleSunshine #LatestWarnings #TheComingStorm #SauravHiremath #RiskyBusiness #SimonWillison #OrcaSecurity #WebFraud2.0 #AIassistant #JamesWilson #MattSchlict #LauraEllis #agenticAI #AmazonAWS #Anthropic #FortiGate #microsoft #RoiNisimi #SummerYue #AIagents #ClawdBot #grith.ai #Moltbook #OpenClaw #CJMoses #Copilot #Moltbot #Claude

How AI Assistants are Moving the Security Goalposts

https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

#JamiesonO'Reilly #ALittleSunshine #LatestWarnings #TheComingStorm #SauravHiremath #RiskyBusiness #SimonWillison #OrcaSecurity #WebFraud2.0 #AIassistant #JamesWilson #MattSchlict #LauraEllis #agenticAI #AmazonAWS #Anthropic #FortiGate #microsoft #RoiNisimi #SummerYue #AIagents #ClawdBot #grith.ai #Moltbook #OpenClaw #CJMoses #Copilot #Moltbot #Claude

How AI Assistants are Moving the Security Goalposts

https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

#JamiesonO'Reilly #ALittleSunshine #LatestWarnings #TheComingStorm #SauravHiremath #RiskyBusiness #SimonWillison #OrcaSecurity #WebFraud2.0 #AIassistant #JamesWilson #MattSchlict #LauraEllis #agenticAI #AmazonAWS #Anthropic #FortiGate #microsoft #RoiNisimi #SummerYue #AIagents #ClawdBot #grith.ai #Moltbook #OpenClaw #CJMoses #Copilot #Moltbot #Claude

CyberStrikeAI used in 600+ FortiGate intrusions across 55 countries.
AI-driven exploit orchestration + 100+ integrated tools.
21 IPs tied to China-based infra.
Patch FortiGate immediately.

Full report:
https://www.technadu.com/cyberstrikeai-deployed-in-over-600-fortigate-attacks-targeting-55-countries/622100/

#InfoSec #AIThreats #FortiGate

CyberStrikeAI used in 600+ FortiGate intrusions across 55 countries.
AI-driven exploit orchestration + 100+ integrated tools.
21 IPs tied to China-based infra.
Patch FortiGate immediately.

Full report:
https://www.technadu.com/cyberstrikeai-deployed-in-over-600-fortigate-attacks-targeting-55-countries/622100/

#InfoSec #AIThreats #FortiGate

CyberStrikeAI used in 600+ FortiGate intrusions across 55 countries.
AI-driven exploit orchestration + 100+ integrated tools.
21 IPs tied to China-based infra.
Patch FortiGate immediately.

Full report:
https://www.technadu.com/cyberstrikeai-deployed-in-over-600-fortigate-attacks-targeting-55-countries/622100/

#InfoSec #AIThreats #FortiGate

CyberStrikeAI used in 600+ FortiGate intrusions across 55 countries.
AI-driven exploit orchestration + 100+ integrated tools.
21 IPs tied to China-based infra.
Patch FortiGate immediately.

Full report:
https://www.technadu.com/cyberstrikeai-deployed-in-over-600-fortigate-attacks-targeting-55-countries/622100/

#InfoSec #AIThreats #FortiGate

Bleeping Computer: Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks. “Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks. A new report by CJ Moses, CISO of Amazon Integrated Security, says that the hacking campaign occurred between […]

THREAT MODEL: CYBERSECURITY
for Feb. 24th, 2026
by independent journalist @violetblue

- People across the US are destroying #Flock cameras

- #Discord ’s “new” ID check tool was on a US government server

- #Arizona and #Colorado want ID scanning for all computer and phone use

- @wikipedia banned #ArchiveToday for DDoS attacks

- Some rando used #AI to hack #FortiGate

- @financialtimes unmasked a Russian oil smuggling ring (from Kremlin-controlled Rosneft) through the ring’s use of a single email server

- Another major #AotearoaNewZealand health app breach

- #TimCurry reveals Clue’s secret ending

- BBC/BAFTA leave N-word intact on tape delay

...and much more.

✨ THREAT MODEL is free to read -- please help keep it accessible to all by becoming a patron, even $1 a month makes a difference! ✨

https://www.patreon.com/posts/cybersecurity-24-151516976

#ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

THREAT MODEL: CYBERSECURITY
for Feb. 24th, 2026
by independent journalist @violetblue

- People across the US are destroying #Flock cameras

- #Discord ’s “new” ID check tool was on a US government server

- #Arizona and #Colorado want ID scanning for all computer and phone use

- @wikipedia banned #ArchiveToday for DDoS attacks

- Some rando used #AI to hack #FortiGate

- @financialtimes unmasked a Russian oil smuggling ring (from Kremlin-controlled Rosneft) through the ring’s use of a single email server

- Another major #AotearoaNewZealand health app breach

- #TimCurry reveals Clue’s secret ending

- BBC/BAFTA leave N-word intact on tape delay

...and much more.

✨ THREAT MODEL is free to read -- please help keep it accessible to all by becoming a patron, even $1 a month makes a difference! ✨

https://www.patreon.com/posts/cybersecurity-24-151516976

#ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

The categorization of the Fortinet web filter is hilarious. I got a report that a certain website is incorrectly blocked by our firewall. After looking into it, the specific website belongs to a large organization.

Different organizational levels of this large organization are categorized as:

• Political organization (federal level)
• General organization (state level)
• Advocacy organization (local level), giving it an R age rating (18+)

The “correct” classification should be either general organization or simply “business”.

This is wrong on many levels. Why are advocacy groups blocked by default? Why do they have an R rating (because politics is only for adults? But then why only advocacy groups and not political organizations?).

#fortinet #fortigate #fortiguard

The categorization of the Fortinet web filter is hilarious. I got a report that a certain website is incorrectly blocked by our firewall. After looking into it, the specific website belongs to a large organization.

Different organizational levels of this large organization are categorized as:

• Political organization (federal level)
• General organization (state level)
• Advocacy organization (local level), giving it an R age rating (18+)

The “correct” classification should be either general organization or simply “business”.

This is wrong on many levels. Why are advocacy groups blocked by default? Why do they have an R rating (because politics is only for adults? But then why only advocacy groups and not political organizations?).

#fortinet #fortigate #fortiguard

The categorization of the Fortinet web filter is hilarious. I got a report that a certain website is incorrectly blocked by our firewall. After looking into it, the specific website belongs to a large organization.

Different organizational levels of this large organization are categorized as:

• Political organization (federal level)
• General organization (state level)
• Advocacy organization (local level), giving it an R age rating (18+)

The “correct” classification should be either general organization or simply “business”.

This is wrong on many levels. Why are advocacy groups blocked by default? Why do they have an R rating (because politics is only for adults? But then why only advocacy groups and not political organizations?).

#fortinet #fortigate #fortiguard

The categorization of the Fortinet web filter is hilarious. I got a report that a certain website is incorrectly blocked by our firewall. After looking into it, the specific website belongs to a large organization.

Different organizational levels of this large organization are categorized as:

• Political organization (federal level)
• General organization (state level)
• Advocacy organization (local level), giving it an R age rating (18+)

The “correct” classification should be either general organization or simply “business”.

This is wrong on many levels. Why are advocacy groups blocked by default? Why do they have an R rating (because politics is only for adults? But then why only advocacy groups and not political organizations?).

#fortinet #fortigate #fortiguard

AI KRAAKT 600 FIREWALLS, BEURZEN DALEN EN ODIDO ESCALEERT

Een Russische hacker gebruikte AI om 600+ FortiGate firewalls te hacken. Claude Code Security deed beurzen kelderen. 30.000+ OpenClaw instances gecompromitteerd. Klanten van Odido: check je bankrekening.

➤ https://www.ccinfo.nl/journaal/3025262_ai-kraakt-600-firewalls-beurzen-dalen-en-odido-escaleert

#Cyberjournaal #ccinfo #FortiGate #AI #OpenClaw #SANDWORMMODE #Odido #cybersecurity #Nederland #Belgie

📢⚠️ 🤖 #Amazon Threat Intel says a low-skill hacker used commercial AI tools to breach hundreds of #FortiGate devices worldwide, showing how automation is lowering the barrier for large-scale cyberattacks.

Read more: https://hackread.com/amazon-hacker-ai-tools-breach-fortigate-devices/

#CyberSecurity #AI #CyberAttack #CyberCrime #Automation

https://www.fortiguard.com/psirt/FG-IR-25-934

FortiGate SSLVPN vuln CVE-2025-68686

(Not) rated highly yet. However, I would promptly patch it (and quickly move away from SSL VPN, regardless of the vendor; instead use IKEv2 EAP-TLS or WireGuard). I think this one might rapidly elevate to a RCE

#infosec #fortigate #fortinet #sslvpn

While I fully agree with the sentiment, I'd like to know _why_ my #Fortigate #firewall suddenly stops all users from loading office.com whenever any application filter profile is active on that network. This happens even if all filter rules are set to monitor or allow.

The FW log doesn't show anything, but the browser seems to hang on handshake, so I'm wondering if it might be related to the current SSL vulnerability that I haven't yet read up on.

Zawsze mówiłem że za Fortigate stoi dialog:
- Jest tanio?
- Jest tanio!
- Jest dobrze?
- Jest tanio!
https://sekurak.pl/zhackowali-infrastrukture-30-farm-wiatrowych-i-fotowoltaicznych-w-polsce-pelne-szczegoly-cyberataku/
#infosec #security #fortigate

Skoordynowany atak na polską elektrociepłownię – zimowy sygnał alarmowy

Czy gdy na zewnątrz trzaska mróz, ktoś przez dziewięć miesięcy gramoli się przez Twoją serwerownię? W jednej z polskich elektrociepłowni – tak.

Czytaj dalej:
https://pressmind.org/skoordynowany-atak-na-polska-elektrocieplownie-zimowy-sygnal-alarmowy/

#PressMindLabs #certpolska #edr #fortigate #oze #statictundra

📢 CERT Polska révèle des attaques destructrices coordonnées contre l’énergie et l’industrie en Pologne
📝 Selon CERT Polska (CSIRT NASK), un ensemble d’attaques purement destructrices a visé le 29 décembre 2025...
📖 cyberveille : https://cyberveille.ch/posts/2026-01-30-cert-polska-revele-des-attaques-destructrices-coordonnees-contre-lenergie-et-lindustrie-en-pologne/
🌐 source : https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/
#FortiGate #ICS_OT #Cyberveille

Si vous administrez des FortiGate/FortiOS : des admins signalent un contournement du patch de la vulnérabilité critique CVE-2025-59718 (FortiCloud SSO https://fortiguard.fortinet.com/psirt/FG-IR-25-647 ) → compromission possible même sur des firewalls « patchés » (ex. 7.4.9/7.4.10).

( https://www.reddit.com/r/fortinet/comments/1qibdcb/possible_new_sso_exploit_cve202559718_on_749/ )

Préreq : “Allow administrative login using FortiCloud SSO” activé (souvent après enregistrement FortiCare).

Mitigation : désactiver admin-forticloud-sso-login + restreindre l’accès admin + vérifier logs/nouveaux comptes.

Chaîne d'exploitation: CVE-2025-59718 (+ CVE-2025-59719 côté FortiWeb) ➡️ envoi de messages SAML forgés ➡️ bypass de vérification de signature ➡️ accès admin non autorisé.

[Références]
"Fortinet admins report patched FortiGate firewalls getting hacked"
👇
https://www.bleepingcomputer.com/news/security/fortinet-admins-report-patched-fortigate-firewalls-getting-hacked/

( https://cyberveille.ch/posts/2026-01-21-fortigate-contournement-de-correctif-sur-lauthentification-forticloud-sso-cve-2025-59718-activement-exploite/)

💬
⬇️
https://infosec.pub/post/40878137

#CyberVeille #Fortinet #FortiGate #FortiOS #CVE_2025_59718

Just some network porn for evening 😎#juniper and #fortigate plus some #lenovo.

https://www.fortiguard.com/psirt/FG-IR-25-084 CVE-2025-25249

A heap-based buffer overflow vuln in FortiOS cw_acd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands

Always use FortiGate local-in-policies on all interfaces for hardening.

#infosec #fortinet #fortigate #hardening

#FortiGate (artist's impression)

Nehmt proprietäre #itsecurity haben sie gesagt. Wird schon sicher sein haben sie gesagt.

https://www.borncity.com/blog/2025/09/26/cisco-adaptive-security-appliance-wird-ueber-0-day-angegriffen/

Nahezu wöchentlich klopfen irgendwelche Systemhäuser mit #itsecurity bei mir in der Firma an. Sobald #cisco, #fortigate, #sophos oder #watchguard fallen ist das Gespräch vorbei. Diese Leute haben nichts verstanden, es reicht eben nicht sich eine nette Appliance mit blauem Schoss auf der Verpackung in den Serverschrank zu nageln!

Pare-feu FortiGate : comment configurer une interface VLAN ? https://www.it-connect.fr/pare-feu-fortigate-comment-configurer-une-interface-vlan/ #Fortigate #Pare-Feu #Fortinet

Kann mich jemand unterstützen bei der Installation von #Fortigate #FortiClient #SSLVPN unter #Ubuntu 24 LTS. Der Client läuft, die Config ist auch klar, aber die einzige Meldung die ich beim connecten kriege ist "Login canceled".

marketing cybercriminel

#CyberVeille #Belsen #FortiGate

Si vous cherchez à évaluer un éventuel impact du leak des configurations #Fortigate de 2022
( https://doublepulsar.com/2022-zero-day-was-used-to-raid-fortigate-firewall-configs-somebody-just-released-them-a7a74e0b0c7f ),
les IP des instances FortiGate compromises à l'époque, ont été mis à disposition ici
👇
https://github.com/arsolutioner/fortigate-belsen-leak/blob/main/affected_ips.txt

Un script pour organiser les adresse par AS et pays est disponible ici
👇
https://github.com/cudeso/tools/tree/master/CVE-2022-40684

...et pour les amateurs d'oignons, quelqu'un a fait ça
👇
https://any.run/report/8706c4029bec49e5ce81a41956a85c14b4a3855a791ee74b78699e7fb796c6a6/5427006e-3537-4142-99f3-2b25a594a51b

#CyberVeille #Belsen #FortiGate #CVE_2022_40684

#Hackers leak #configs and #VPN credentials for 15,000 #FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

#Hackers leak #configs and #VPN credentials for 15,000 #FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

#Hackers leak #configs and #VPN credentials for 15,000 #FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

#Hackers leak #configs and #VPN credentials for 15,000 #FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

#Hackers leak #configs and #VPN credentials for 15,000 #FortiGate devices

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

Krytyczny błąd 0day w Fortigate. Jest w trakcie exploitacji, przejmują dostępy do VPNa w firmach.

Luka umożliwia pełne przejęcie urządzenia z poziomu Internetu. Tj. zdobycie uprawnień super-admina. Podatność jest wykorzystywana w realnych atakach, najprawdopodobniej od okolic grudnia 2024. Nie wiadomo dokładnie jaka grupa odpowiedzialna jest za ataki. W ramach ataków wykonywane są takie operacje jak: Podatne są FortiOS (7.0.0 do 7.0.16) oraz FortiProxy (linia 7.0.x...

#WBiegu #0Day #AuthBypass #AuthenticationBypass #Fortigate #VPN

https://sekurak.pl/krytyczny-blad-0day-w-fortigate-jest-w-trakcie-exploitacji-przejmuja-dostepy-do-vpna-w-firmach/

#Fortinet have dropped 29 security updates today, 14 of which are rated "high" or "critical". Have fun everyone. (Fortunately, only one 'low' affects our stuff but FFS, come on)

https://www.fortiguard.com/psirt

#fortios #fortifail #fortigate

Publication par Assetnote d'une analyse précise de la vulnérabilité RCE de février (CVE-2024-21762) dans les composants VPN SSL de FortiGate

Patch Diffing ➡️ Crash ➡️Exploit
👇
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Des PoC sont désormais disponibles sur Github
➡️ h4x0r-dz/CVE-2024-21762

(exploitation de masse sur internet en cours)

#CyberVeille #Fortigate #CVE_2024_21762

Publication par Assetnote d'une analyse précise de la vulnérabilité RCE de février (CVE-2024-21762) dans les composants VPN SSL de FortiGate

Patch Diffing ➡️ Crash ➡️Exploit
👇
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Des PoC sont désormais disponibles sur Github
➡️ h4x0r-dz/CVE-2024-21762

(exploitation de masse sur internet en cours)

#CyberVeille #Fortigate #CVE_2024_21762

Publication par Assetnote d'une analyse précise de la vulnérabilité RCE de février (CVE-2024-21762) dans les composants VPN SSL de FortiGate

Patch Diffing ➡️ Crash ➡️Exploit
👇
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Des PoC sont désormais disponibles sur Github
➡️ h4x0r-dz/CVE-2024-21762

(exploitation de masse sur internet en cours)

#CyberVeille #Fortigate #CVE_2024_21762

Publication par Assetnote d'une analyse précise de la vulnérabilité RCE de février (CVE-2024-21762) dans les composants VPN SSL de FortiGate

Patch Diffing ➡️ Crash ➡️Exploit
👇
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Des PoC sont désormais disponibles sur Github
➡️ h4x0r-dz/CVE-2024-21762

(exploitation de masse sur internet en cours)

#CyberVeille #Fortigate #CVE_2024_21762

Publication par Assetnote d'une analyse précise de la vulnérabilité RCE de février (CVE-2024-21762) dans les composants VPN SSL de FortiGate

Patch Diffing ➡️ Crash ➡️Exploit
👇
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762

Des PoC sont désormais disponibles sur Github
➡️ h4x0r-dz/CVE-2024-21762

(exploitation de masse sur internet en cours)

#CyberVeille #Fortigate #CVE_2024_21762

L'implementazione di LDAP su SSL (#LDAPS) con dispositivi #FortiGate rappresenta una soluzione essenziale per migliorare la #sicurezza della gestione delle identità e delle politiche di accesso nella rete aziendale.

https://www.ictpower.it/sicurezza/fortinet-configurazione-ldaps-server-integrato-in-active-directory.htm

Super happy that #fortinet didn't wait until 10pm today to announce the new #fortigate vulnerability. I could actually spend the regular work day getting all our clients patched.
Not that I didn't have enough other work to do.
#cve_2024_21762