X

Vous n'êtes pas connecté

Maroc Maroc - SECURITYAFFAIRS.CO - A La Une - 11/Feb 23:06

Attackers exploit a new zero-day to hijack Fortinet firewalls

Fortinet warned of attacks using a now-patched zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. Fortinet warned that threat actors are exploiting a new zero-day vulnerability, tracked as CVE-2025-24472 (CVSS score of 8.1), in FortiOS and FortiProxy to hijack Fortinet firewalls. The vulnerability is an authentication bypass issue that could allow a remote attacker […]

Articles similaires

Sorry! Image not available at this time

Attackers exploit a new zero-day to hijack Fortinet firewalls

itsecuritynews.info - 12/Feb 00:13

Fortinet warned of attacks using a now-patched zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls. Fortinet warned that...

Sorry! Image not available at this time

Fortinet warns of new zero-day exploited to hijack firewalls

bleepingcomputer.com - 11/Feb 18:56

Fortinet warned today that attackers are exploiting another now-patched zero-day bug in FortiOS and FortiProxy to hijack Fortinet firewalls and breach...

Sorry! Image not available at this time

Fortinet FortiOS & FortiProxy Zero-Day Exploited to Hijack Firewall & Gain Super Admin Access

itsecuritynews.info - 11/Feb 20:32

Cybersecurity firm Fortinet has issued an urgent warning regarding a newly discovered zero-day authentication bypass vulnerability (CVE-2025-24472)...

Sorry! Image not available at this time

CVE-2024-24472 impacts Fortinet Producrs

thecyberthrone.in - 12/Feb 12:43

CVE-2024-24472 is a critical security vulnerability identified in Fortinet products, specifically FortiOS and FortiProxy. This vulnerability poses a...

Sorry! Image not available at this time

Fortinet discloses second firewall auth bypass patched in January

bleepingcomputer.com - 11/Feb 18:56

Fortinet has disclosed a second authentication bypass vulnerability that was fixed as part of a January 2025 update for FortiOS and FortiProxy...

Sorry! Image not available at this time

Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks

securityaffairs.co - 09:23

Threat actors are exploiting a zero-day SQL injection vulnerability in PostgreSQL, according to researchers from cybersecurity firm Rapid7. Rapid7...

Sorry! Image not available at this time

AMD fixed a flaw that allowed to load malicious microcode

securityaffairs.co - 04/Feb 14:49

AMD released security patches to fix a flaw that could bypass SEV protection, letting attackers load malicious microcode. Researchers from Google...

Sorry! Image not available at this time

CVE-2025-23419 impacts Nginx Server

thecyberthrone.in - 07/Feb 08:27

CVE-2025-23419 is a security vulnerability that arises when multiple server blocks in an Nginx configuration share the same IP address and port. An...

Sorry! Image not available at this time

Apple fixes iPhone and iPad bug exploited in ‘extremely sophisticated attacks’

securityaffairs.co - 10/Feb 22:41

Apple released iOS and iPadOS updates to address a zero-day likely exploited in extremely sophisticated attacks targeting specific individuals. Apple...

Sorry! Image not available at this time

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)

itsecuritynews.info - 11:31

Palo Alto Networks has fixed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its next-gen...