fortinet - Tech News from Simmons Systems

Tech News from Simmons Systems

fortinet

A collection of 3 posts

Fortinet Sounds Alarm on Critical FortiMail Zero-Day Under Active Attack

Fortinet is warning customers about a critical vulnerability in FortiMail, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks. The flaw, which scores 9.8 on the CVSS scale, allows an unauthenticated attacker to write arbitrary files on the underlying system through crafted HTTP or HTTPS requests, potentially

CISA Orders Federal Agencies to Patch Exploited Fortinet FortiSandbox Flaws by Sunday

CISA has ordered federal agencies to patch two critical vulnerabilities in Fortinet's FortiSandbox threat detection platform by Sunday, July 19. The flaws, tracked as CVE-2026-39808 and CVE-2026-25089, allow unauthenticated attackers to execute remote code through command injection attacks that require no user interaction. Both vulnerabilities have been added

FortiBleed Credential Theft Campaign Tied to Lynx and INC Ransomware Groups

The FortiBleed credential theft campaign, which compromised more than 73,000 Fortinet devices, is now directly linked to the INC and Lynx ransomware-as-a-service groups. SOCRadar's Threat Research Unit discovers the connection after identifying a Windows server used as part of the FortiBleed infrastructure that contains access to ransomware