Collecting Cyber-News from over 60 sources

Tag: fortinet

Fortinet Issues Emergency Patch for FortiClient Zero-Day

Apr 6, 2026 11:51 PM

Tags: authentication, cve, exploit, flaw, fortinet, update, vulnerability, zero-day

The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that have been exploited in the wild. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/fortinet-emergency-patch-forticlient-zero-day
Attackers exploited this critical FortiClient EMS bug as a 0-day

Apr 6, 2026 8:52 PM

Tags: cisa, exploit, flaw, fortinet, kev, zero-day

CISA added the flaw to KEV after Fortinet confirmed exploitation in the wild First seen on theregister.com Jump to article: www.theregister.com/2026/04/06/forticlient_ems_bug_exploited/
Attackers Target Zero-Day Flaw in Fortinet Security Software

Apr 6, 2026 7:52 PM

Tags: endpoint, flaw, fortinet, software, zero-day

Vendor Issues Hotfix for Critical Flaw in FortiClient Endpoint Management Server. Fortinet’s endpoint management security server software is under fire from attackers, who are actively targeting two critical flaws, including a fresh zero-day that facilitates unauthenticated remote code or command execution. The vendor has issued a hotfix and promised a full patch. First seen on…
DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

Apr 6, 2026 7:52 PM

Tags: attack, control, fortinet, github, hacker, infrastructure, korea, threat, windows

Threat actors likely associated with the Democratic People’s Republic of Korea (DPRK) have been observed using GitHub as command-and-control (C2) infrastructure in multi-stage attacks targeting organizations in South Korea.The attack chain, per Fortinet FortiGuard Labs, involves obfuscated Windows shortcut (LNK) files acting as the starting point to drop a decoy PDF First seen on thehackernews.com…
CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild

Apr 6, 2026 7:52 PM

Tags: access, advisory, api, attack, authentication, cisa, control, cve, cyber, cybersecurity, data, exploit, flaw, fortinet, github, infrastructure, injection, kev, malicious, ransomware, sql, threat, update, vpn, vulnerability, zero-day

Exploitation has been observed for CVE-2026-35616, a critical improper access control zero-day vulnerability affecting Fortinet FortiClientEMS devices. Key takeaways: CVE-2026-35616, an improper access control vulnerability, has been exploited in the wild as a zero-day. Public exploit code has been identified and Fortinet products have a long history of targeting by malicious actors. Hotfixes have been…
Singapore, US warn of latest Fortinet bug being exploited in wild

Apr 6, 2026 6:50 PM

Tags: cybersecurity, exploit, fortinet, infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Thursday to apply the hotfix. First seen on therecord.media Jump to article: therecord.media/singapore-us-warn-of-fortinet-bug-exploited
New Fortinet Flaw Allows Unauthorized Access to Enterprise Systems

Apr 6, 2026 6:50 PM

Tags: access, authentication, exploit, flaw, fortinet, unauthorized, vulnerability, zero-day

Fortinet warns of a critical FortiClient EMS zero-day vulnerability that is currently being exploited, allowing attackers to bypass authentication and execute commands. The post New Fortinet Flaw Allows Unauthorized Access to Enterprise Systems appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-fortinet-forticlient-ems-zero-day-active-exploitation/
CISA orders feds to patch exploited Fortinet EMS flaw by Friday

Apr 6, 2026 6:50 PM

Tags: cisa, cybersecurity, exploit, flaw, fortinet, infrastructure, update, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against an actively exploited vulnerability by Friday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-fortinet-flaw-exploited-in-attacks-by-friday/
CISA orders feds to patch exploited Fortinet EMS flaw by Friday

Apr 6, 2026 6:50 PM

Tags: cisa, cybersecurity, exploit, flaw, fortinet, infrastructure, update, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against an actively exploited vulnerability by Friday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-fortinet-flaw-exploited-in-attacks-by-friday/
Critical flaw in FortiClient EMS under exploitation

Apr 6, 2026 5:52 PM

Tags: exploit, flaw, fortinet, vulnerability

Fortinet released an emergency hotfix after security researchers discovered the vulnerability being exploited as a zero-day. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-flaw-forticlient-ems-exploitation/816699/
‘Critical’ FortiClient EMS Vulnerability Exploited In Attacks

Apr 6, 2026 5:52 PM

Tags: attack, exploit, fortinet, vulnerability

Fortinet disclosed that it has observed exploitation of a vulnerability in its FortiClient EMS (Enterprise Management Server) platform, prompting the release of an emergency patch. First seen on crn.com Jump to article: www.crn.com/news/security/2026/fortinet-critical-forticlient-ems-vulnerability-exploited-in-attacks
âš¡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

Apr 6, 2026 4:51 PM

Tags: attack, browser, chrome, exploit, fortinet, software, spyware, tool, zero-day

This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day. Some attacks didn’t even need much effort because the path was already there.One weak spot now spreads wider than before. What starts small can reach a lot of systems fast. New bugs, faster…
CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw

Apr 6, 2026 8:51 AM

Tags: access, attack, authentication, control, cve, exploit, flaw, fortinet, vulnerability

Fortinet issued emergency patches for a critical FortiClient EMS flaw (CVE-2026-35616) actively exploited in the wild. Fortinet released out-of-band patches for a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616 (CVSS 9.1), which is already being exploited in attacks in the wild. The flaw is an improper access control issue that allows attackers to bypass authentication…
2,000+ FortiClient EMS Instances Exposed Online as Attackers Exploit Active RCE Flaw

Apr 6, 2026 7:52 AM

Tags: control, cve, cyber, cybersecurity, data-breach, exploit, flaw, fortinet, rce, remote-code-execution, threat, tool, vulnerability

Cybersecurity researchers have issued an urgent warning for organizations using Fortinet’s FortiClient Enterprise Management Server (EMS). Over 2,000 instances of this critical administrative tool are currently exposed to the public internet. Threat actors are actively exploiting severe vulnerabilities to take full control of these systems. These security gaps are tracked as CVE-2026-35616, which is a…
New FortiClient EMS flaw exploited in attacks, emergency patch released

Apr 5, 2026 9:52 PM

Tags: attack, exploit, flaw, fortinet, update, vulnerability

Fortinet has released an emergency weekend security update for a new critical FortiClient Enterprise Management Server (EMS) vulnerability that is actively exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-fortinet-forticlient-ems-flaw-cve-2026-35616-exploited-in-attacks/
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Apr 5, 2026 7:50 AM

Tags: access, api, authentication, control, cve, exploit, flaw, fortinet, vulnerability

Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild.The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation.”An improper access control vulnerability [CWE-284] in FortiClient EMS may allow an First seen…
FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616)

Apr 4, 2026 4:51 PM

Tags: cyber, endpoint, exploit, fortinet, vulnerability, zero-day

Defused Cyber has spotted a critical Fortinet FortiClient Endpoint Management Server (EMS) zero-day vulnerability (CVE-2026-35616) being exploited in the wild. This time … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/04/forticlient-ems-zero-day-cve-2026-35616/
Fortinet hit by another exploited cybersecurity flaw

Mar 31, 2026 5:30 AM

Tags: access, advisory, ai, application-security, attack, authentication, control, credentials, cybersecurity, exploit, firewall, flaw, fortinet, group, hacking, infrastructure, injection, Internet, open-source, privacy, ransomware, remote-code-execution, risk, service, sql, theft, threat, tool, unauthorized, update, vulnerability, zero-day, zero-trust

SQL injection a top app security issue: Beauceron’s Shipley underscored the dangers of SQL injection, pointing out that the vulnerability was the first on the OWASP top 10 application security risks when the open source foundation was launched more than 20 years ago. The attack type has remained in the top spot for most of…
Fortinet BIG-IP Vulnerability Reclassified as RCE, Under Exploitation

Mar 30, 2026 10:30 PM

Tags: cve, exploit, flaw, fortinet, rce, remote-code-execution, service, vulnerability

CVE-2025-53521 was initially disclosed in October as a high-severity denial-of-service (DoS) flaw, but new information has revealed the bug is actually much more dangerous. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/fortinet-big-ip-vulnerability-reclassified-rce-exploitation
Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

Mar 30, 2026 3:30 PM

Tags: attack, endpoint, fortinet, injection, sql, vulnerability

A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/30/forticlient-ems-cve-2026-21643-reported-exploitation/
Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution

Mar 30, 2026 1:29 PM

Tags: cve, exploit, flaw, fortinet, remote-code-execution, sql, threat, vulnerability

Attackers are exploiting a critical Fortinet FortiClient EMS flaw (CVE-2026-21643) that allows remote code execution via SQL injection. A critical Fortinet FortiClient EMS vulnerability, tracked as CVE-2026-21643 (CVSS score of 9.1), is now being actively exploited. Defused researchers warn that threat actors are exploiting the vulnerability in Fortinet’s FortiClient EMS platform. >>Fortinet Forticlient EMS CVE-2026-21643…
Critical Fortinet FortiClient EMS Vulnerability Actively Exploited in Attacks

Mar 30, 2026 12:30 PM

Tags: attack, cve, cyber, exploit, flaw, fortinet, government, intelligence, malicious, threat, unauthorized, vulnerability

Threat intelligence researchers have detected active exploitation of a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS). The security flaw, identified as CVE-2026-21643, allows malicious actors to execute unauthorized database commands. While attacks have been occurring in the wild for several days, official government tracking lists have yet to classify the flaw as actively…
Critical Fortinet Forticlient EMS flaw now exploited in attacks

Mar 30, 2026 10:29 AM

Tags: attack, exploit, flaw, fortinet, intelligence, threat, vulnerability

Attackers are now actively exploiting a critical vulnerability in Fortinet’s FortiClient EMS platform, according to threat intelligence company Defused. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-fortinet-forticlient-ems-flaw-now-exploited-in-attacks/
Best AI Security Solutions for Enterprises in 2026

Mar 26, 2026 6:47 PM

Tags: ai, cloud, crowdstrike, endpoint, fortinet

Enterprise AI security solutions in 2026, compare Check Point, Palo Alto, CrowdStrike, Fortinet, and Zscaler across cloud, endpoint, and network. First seen on hackread.com Jump to article: hackread.com/best-ai-security-solutions-enterprises-2026/
FortiClient Hit by Severe SQL Injection Vulnerability Enabling Database Intrusion

Mar 18, 2026 8:09 AM

Tags: authentication, control, cve, cvss, cyber, cybersecurity, flaw, fortinet, injection, sql, vulnerability

Cybersecurity researchers have a detailed a critical security flaw in Fortinet’s FortiClient Enterprise Management Server (EMS). Tracked as CVE-2026-21643, this severe pre-authentication SQL injection vulnerability carries a near-maximum CVSS severity score of 9.1. It allows unauthenticated attackers to execute arbitrary SQL commands and gain total control over the underlying database. The flaw specifically targets multi-tenant…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
FAQ on CVE-2026-21514: OLE bypass N-Day in Microsoft Word

Mar 18, 2026 5:10 AM

Tags: access, ai, apt, attack, awareness, backdoor, cctv, cisa, cloud, control, cve, cyber, cyberattack, data, data-breach, detection, email, endpoint, exploit, flaw, fortinet, google, government, group, healthcare, identity, infrastructure, intelligence, Internet, iran, kev, malicious, malware, microsoft, mitigation, network, office, phishing, remote-code-execution, risk, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security prompts, enabling deployment of malware and establishing persistent access without triggering user warnings. Key takeaways: CVE-2026-21514 is a Microsoft Word n-day that bypasses OLE and Mark-of-the-Web protections, executing payloads silently without triggering user security prompts Tenable’s…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Operation Epic Fury: Why exposure data changes everything about Iran’s cyber-kinetic campaign

Mar 18, 2026 5:10 AM

Tags: access, ai, api, apt, attack, backdoor, breach, cctv, cisa, cloud, country, cve, cvss, cyber, cybersecurity, data, data-breach, ddos, detection, dns, espionage, exploit, firewall, flaw, fortinet, government, group, healthcare, identity, infrastructure, intelligence, Internet, iot, iran, kev, malware, microsoft, military, network, office, phishing, radius, remote-code-execution, risk, strategy, supply-chain, technology, threat, unauthorized, update, vpn, vulnerability, warfare, windows

Iran’s retaliatory campaign following Operation Epic Fury has collapsed the boundary between physical and digital warfare. Tenable’s exposure data analysis across seven target countries reveals that the largest exploitable attack surface isn’t the headline threat, it’s a Microsoft Word N-day affecting nearly 14 million assets. Key takeaways: Exposure data rebalances the threat picture. A Microsoft…
Storm-2561 Uses Fake Fortinet, Ivanti VPN Sites to Drop Hyrax Infostealer

Mar 17, 2026 10:10 PM

Tags: cybercrime, fortinet, ivanti, microsoft, vpn

In mid-January 2026, Microsoft Defender Experts identified a devious way that cybercriminals are tricking people into giving away… First seen on hackread.com Jump to article: hackread.com/storm-2561-fake-fortinet-ivanti-vpn-sites-hyrax-infostealer/