Topic: exploitation campaign
-
Patched FortiGate Firewalls Still Vulnerable to CVE-2025-59718
A critical Fortinet firewall vulnerability (CVE-2025-59718) remains actively exploitable even on systems with official patches, allowing attackers to bypass authentication and take over networks. Security researchers have confirmed ongoing exploitation where attackers use malicious SSO logins to ...
Read More » -
Ivanti EPMM "sleeper" webshells pose hidden threat
A critical vulnerability (CVE-2026-1281) in Ivanti's EPMM platform is being actively exploited, with attackers implanting hidden, dormant backdoors that are difficult to detect. The exploitation campaign, linked to initial access brokers, has already compromised several high-profile organizations...
Read More » -
SonicWall SMA 100 Series Now Fights Rootkits
SonicWall has released a critical firmware update for its SMA 100 series to scan for and remove the OVERSTEP rootkit, patching vulnerabilities like CVE-2024-38475 in response to a sophisticated attack by threat group UNC6148. The attack involved using stolen credentials to gain unauthorized acces...
Read More »