4 casos · pág. 1/1
The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…
Fortinet announced coordinated security hardening updates for FortiOS, FortiManager and FortiAnalyzer, scheduled for October 22, 2026. They address critical and high-severity vulnerabilities. CISO Carl Windsor said the fixes come from frontier AI-assisted security testing, with contributions acknowledged from Anthropic, OpenAI, Google and…
Unit 42 detailed a multi-stage intrusion in September 2024 against a telecommunications managed service provider, tracked as CL-STA-0954 (aka UNC5820). The attackers gained initial access by exploiting CVE-2024-47575 (FortiJump) on a central FortiManager and exfiltrated an archive with running configurations, credentials and private keys …
Fortinet published PSIRT advisory FG-IR-26-186 for CVE-2026-109618, a flaw in PHP that can lead to remote code execution (RCE). PHP uses longjmp() to abort request handling on out-of-memory (OOM) errors. Some contexts do not account for this and leave request memory uninitialized before an allocation. Fortinet says it is still investigati…
