Chinese APT exploited unpatched Fortinet zero-day flaw

Volexity reported that a Chinese APT actor exploited a zero-day vulnerability in Fortinet’s Windows VPN FortiClient software that enables credentials to be stolen from a system.

First seen on