The flaw, tracked as CVE-2026-24858, allows an attacker with a registered device and a FortiCloud account to access devices ...
To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...
Mandiant analyzed ShinyHunters' MO, detailing how it steals login and MFA codes.
Fortinet has released patches for CVE-2026-24858, an authentication bypass exploited in the wild to compromise devices.
Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...
Fix didn't quite do the job – attackers spotted logging in Fortinet has confirmed that attackers are actively bypassing a December patch for a critical FortiCloud single sign-on (SSO) authentication ...
The ShinyHunters extortion group has leaked 14 million records allegedly stolen from US bakery-cafe chain Panera Bread.
The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) ...
Attackers have been targeting various Fortinet products for some time. A functional security update is still missing.
Understand five best practices to overcome the most common SSO failure points and how organizations can reduce identity risk ...
Fortinet released updates for an actively exploited FortiOS SSO authentication bypass flaw, CVE-2026-24858, now listed by CISA in KEV.
Scattered LAPSUS$ Hunters are targeting major firms with sophisticated voice phishing attacks.