> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack on ConnectWise has compromised Microsoft 365 tenants, prompting immediate security measures. Drupal has patched significant remote code execution vulnerabilities, with warnings of potential exploit attempts. Additionally, various French industries and state operators are facing targeted cyberattacks, including DDoS and data exfiltration. The rise of AI-driven attacks is evident, with reports of unauthorized access to Indian organizations' data, while malicious npm packages like "imgdecode" are part of ongoing supply chain risks. Lastly, the U.S. CISA has added new vulnerabilities from Fortinet and BeyondTrust to its exploited catalog, emphasizing the need for heightened security vigilance across sectors.
|
// AI-powered summary generated at 16:01
CVSSv3 Score:
6.4
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.
Revised on 2025-12-09 00:00:00
CVSSv3 Score:
6.3
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS, FortiProxy, FortiPAM and FortiSRA may allow a read-only administrator to retrieve API tokens of other administrators via observing REST API logs, if REST API logging is enabled (non-d...
Deux extensions malveillantes ont été découvertes sur la Marketplace de Visual Studio Code, dissimulant un infostealer capable de dérober des données sensibles.
Le post Visual Studio Code : ces 2 extensions malveillantes volent vos données avec un malware infostealer a été publié sur IT-Connect.
CVSSv3 Score:
5.3
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSLVPN may allow an attacker to maintain access to network resources via an active session not terminated after a user's password change under particular conditions outside of the attacker's control...
CVSSv3 Score:
2.6
A Direct Request ('Forced Browsing') [CWE-425] vulnerability in FortiAuthenticator logs may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints.
Revised on 2025-12-09 00:00:00
Secure by Design.Categories: Products & ServicesTags: featured, Firewall, network, Sophos Firewall, v22
CVSSv3 Score:
9.1
An Improper Verification of Cryptographic Signature vulnerability[CWE-347] in FortiOS, FortiWeb, FortiProxy and FortiSwitchManager mayallow an unauthenticated attacker to bypass the FortiCloud SSO loginauthentication via a crafted SAML message, if that feature is enabled...
CVSSv3 Score:
6.7
An OS command injection vulnerabtility [CWE-78] in FortiExtender API may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
Revised on 2025-12-09 00:00:00
In this Help Net Security interview, Natalia Oropeza, Chief Cybersecurity Officer at Siemens, discusses how industrial organizations are adapting to a shift in cyber risk driven by AI. She notes that in-house capability, especially for OT response and recovery, is becoming a priority. Oropeza also e...
CVSSv3 Score:
6.8
An improper neutralization of special elements used in an SQL command ('SQL injection') [CWE-89] in FortiVoice may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests.
Revised on 2025-12-09 00:00:00
CVSSv3 Score:
6.9
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSandbox GUI may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests.
Revi...
As AI adoption accelerates across enterprises — and among digital adversaries — a heated debate has erupted over whether AI’s role in the cyber threat chain should be a top concern for CISOs.
A vocal handful of experts, along with one cybersecurity vendor, insist that warni...
CVSSv3 Score:
7.0
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiSandbox may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests.
Revised on 2025...
CVSSv3 Score:
7.7
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] in FortiVoice may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands.
Revised on 2025-12-09 00:...
Get your Hyper-V and VMware ESXi setups in order, people Researchers at security software vendor Huntress say they’ve noticed a huge increase in ransomware attacks on hypervisors and urged users to ensure they’re as secure as can be and properly backed up.…
CVSSv3 Score:
5.9
A key management error vulnerability [CWE-320] in FortiManager, FortiAnalyzer and FortiPortal may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.
Revised on 2025-12-09 00:00:00
CVSSv3 Score:
2.6
An improper access control vulnerability [CWE-284] in FortiAuthenticator Web UI may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.
Revised on 2025-...
Julian Andres Klode discovered that python-apt incorrectly handled
deb822 configuration files. An attacker could use this issue to cause
python-apt to crash, resulting in a denial of service.
CVSSv3 Score:
5.3
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiSandbox may allow an attacker to perform an XSS attack via crafted HTTP requests.
Revised on 2025-12-09 00:00:00
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: