Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flawHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2026VulnerabilityCVE-2026-20045CVE-2025-5971860
Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall ConfigurationsThe Hacker News·Jan 22, 05:55 UTC · Jan 22, 2026VulnerabilityCVE-2025-59718CVE-2025-5971935
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication BypassThe Hacker News·Dec 17, 03:57 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-59718CVE-2025-5971960
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSLThe Hacker News·Apr 17, 05:03 UTC · Apr 17, 2025Data breachCVE-2022-42475CVE-2023-27997CVE-2024-2176260
Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromisedHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2024VulnerabilityCVE-2024-37051CVE-2024-4577CVE-2024-30080+1 CVEs160
Chinese FortiGate Espionage Campaign Snares 20,000+ VictimsInfosecurity Magazine·Jun 12, 09:45 UTC · Jun 12, 2024Threat actorCVE-2022-4247560
336,000 servers remain unpatched against critical Fortigate vulnerabilityArs Technica · Security·Jul 3, 19:46 UTC · Jul 3, 2023Vulnerability in the wildCVE-2023-2799760
Fortinet urges customers to immediately fix a critical authentication bypass flaw in FortiGate and FortiProxySecurity Affairs·Oct 7, 14:38 UTC · Oct 7, 2022Vulnerability in the wildCVE-2022-4068460
FortiBleed: The Most Detailed Breakdown Yet of an Active Russian CredentialSecurity Affairs·Jun 22, 10:48 UTC · Jun 22, 2026Ransomware57
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet FirewallsInfosecurity Magazine·Feb 23, 12:30 UTC · Feb 23, 2026Threat actor in the wildCVE-2019-7192CVE-2023-27532CVE-2024-40711160
Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate FirewallsThe Hacker News·Jan 23, 12:30 UTC · Jan 23, 2026VulnerabilityCVE-2025-59718CVE-2025-5971935
New Hacking Group Leaks Configuration of 15,000 Fortinet FirewallsInfosecurity Magazine·Jan 16, 12:50 UTC · Jan 16, 2025Data breachCVE-2022-40684CVE-2024-5559160
Fortinet Warns of Critical Vulnerability in FortiManager Under Active ExploitationThe Hacker News·Nov 15, 04:35 UTC · Nov 15, 2024Vulnerability in the wildCVE-2024-4757560
Chinese hackers breached Dutch Ministry of DefenseHelp Net Security·Feb 15, 11:48 UTC · Feb 15, 2024Data breachCVE-2022-4247560
Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military NetworkThe Hacker News·Feb 9, 16:01 UTC · Feb 9, 2024Exploit / PoCCVE-2022-4247560
Nearly 70% of FortiGate Firewalls are vulnerable to new bug, experts sayThe Record·Jul 5, 14:00 UTC · Jul 5, 2023RansomwareCVE-2023-2799760
Alert: 330,000 FortiGate Firewalls Still Unpatched to CVE-2023The Hacker News·Jul 4, 17:48 UTC · Jul 4, 2023Vulnerability in the wildCVE-2023-2799760
Critical RCE Flaw Discovered in Fortinet FortiGate FirewallsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023VulnerabilityCVE-2023-2799760
Fortinet Warns of New Auth Bypass Flaw Affecting FortiGate and FortiProxyThe Hacker News·Oct 8, 04:39 UTC · Oct 8, 2022VulnerabilityCVE-2022-4068460
Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate DevicesThe Hacker News·Sep 9, 07:33 UTC · Sep 9, 2021RansomwareCVE-2018-1337960
Fortinet VPN with Default Settings Leave 200,000 Businesses Open to HackersThe Hacker News·Sep 25, 19:37 UTC · Sep 25, 2020Vulnerability30
48,000+ internet-facing Fortinet firewalls still open to attackHelp Net Security·Jan 22, 00:00 UTC · Jan 22, 2025Exploit / PoC in the wildCVE-2024-5559160
Chinese cyber espionage campaign targets ‘dozens’ of Western governments, Dutch officials sayCyberScoop·Jun 11, 20:12 UTC · Jun 11, 2024Threat actor in the wild60
GTT expands portfolio with Fortinet’s FortiGate Secure SD-WAN solutionHelp Net Security·Dec 14, 11:36 UTC · Dec 14, 2023Industry30
Fortinet Addresses Critical FortiGate SSLInfosecurity Magazine·Jun 13, 17:30 UTC · Jun 13, 2023Exploit / PoCCVE-2023-2799760
74,000 Fortinet firewall credentials exposed in FortiBleed data leakHelp Net Security·Aug 3, 13:19 UTC · Aug 3, 2026Data breach60
CISA Warns of Active Exploitation Following FortiBleed LeakSecurity Affairs·Jun 20, 08:27 UTC · Jun 20, 2026Advisory in the wild60
FortiBleed Exposes Admin Passwords for 75,000 Fortinet FirewallsSecurity Affairs·Jun 18, 07:31 UTC · Jun 18, 2026Exploit / PoC in the wild60
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalogSecurity Affairs·Dec 17, 08:17 UTC · Dec 17, 2025Exploit / PoC in the wildCVE-2025-59718CVE-2025-5971960
Hackers are exploiting critical Fortinet flaws days after patch releaseSecurity Affairs·Dec 16, 15:40 UTC · Dec 16, 2025VulnerabilityCVE-2025-59718CVE-2025-5971960
Attackers exploit Fortinet flaws to deploy Qilin ransomwareSecurity Affairs·Jun 6, 22:09 UTC · Jun 6, 2025Ransomware in the wildCVE-2024-21762CVE-2024-55591CVE-2025-2447260
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]The Hacker News·Jan 27, 12:39 UTC · Jan 27, 2025VulnerabilityCVE-2025-23006CVE-2025-20156CVE-2025-21556+7 CVEs60
Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them?Help Net Security·Jan 23, 15:27 UTC · Jan 23, 2025Data breachCVE-2022-40684CVE-2018-1337960
CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in yearsThe Record·Jan 17, 01:12 UTC · Jan 17, 2025Vulnerability in the wildCVE-2024-55591CVE-2025-21333CVE-2025-2133460
A new campaign is likely targeting a zeroSecurity Affairs·Jan 14, 12:20 UTC · Jan 14, 2025Threat actorCVE-2023-2799760
watchTowr Finds New ZeroInfosecurity Magazine·Nov 15, 12:15 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-47575CVE-2024-2311360
FortiJump flaw CVE-2024-47575 has been exploited in zeroSecurity Affairs·Oct 24, 11:08 UTC · Oct 24, 2024Vulnerability in the wildCVE-2024-4757560
87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113)Help Net Security·Oct 15, 00:00 UTC · Oct 15, 2024Vulnerability in the wildCVE-2024-2311360
Infosec products of the month: August 2022Help Net Security·Jan 11, 11:51 UTC · Jan 11, 2024Policy & legal55
Fortinet partners with Wiz to help enterprises protect their cloud environmentsHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2023Industry30