Topic: administrative access
-
Fortinet Mitigates Critical FortiCloud SSO Zero-Day Before Patch
A critical authentication bypass flaw (CVE-2026-24858) in Fortinet's FortiCloud SSO was actively exploited, allowing attackers to gain administrative control over devices, even fully patched ones, by creating rogue accounts. Fortinet responded by globally disabling and then restricting FortiCloud...
Read More » -
Urgent Patch: Critical Passwordstate Vulnerability Exposed
A critical security update is required for Passwordstate to address a high-severity vulnerability that allows attackers to bypass authentication and gain administrative control. The flaw involves a manipulated URL targeting the emergency access page, enabling unauthorized access to the administra...
Read More » -
Secure Your Exchange Server: CISA & NSA Best Practices
A new cybersecurity framework from CISA and the NSA provides detailed steps to protect Microsoft Exchange Server installations from sophisticated threats, focusing on hybrid and on-premises environments. Key recommendations include restricting administrative access, enforcing multi-factor authent...
Read More »