Fortinet’s delayed alert on actively exploited defect put defenders at a disadvantage

The security vendor silently patched a vulnerability, but did not assign the flaw a CVE or publicly disclose its existence until 17 days later. By then, widespread attacks were already underway.

First seen on cyberscoop.com

Jump to article: cyberscoop.com/fortinet-delayed-disclosure-exploited-vulnerability/