Pedro Pinto

⚠️ FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User | Read more: https://lnkd.in/d3Zy4JW2 ✅ CVE-2025-52970 lets attackers bypass authentication to log in as any user on FortiWeb systems. ✅ FortiWeb 7.0-7.6 versions are vulnerable. ✅ Attackers manipulate cookie parameters to force zero-filled encryption keys. #cybersecuritynews #vulnerability

473

11 comentários

🚨 CVSS 10.0 flaw in Cisco Secure Firewall could let attackers run commands with high privilege — no login needed. The catch? Just RADIUS auth enabled is enough. No workarounds. Patch now. Full details → https://lnkd.in/gdtZS7Ju

457

11 comentários

Unit 42 researchers have analyzed CL-STA-0969, activity targeting critical telecommunications infrastructure. Activity observed through most of 2024 shows overlaps with the nation-state adversary Liminal Panda. Key TTPs include custom malware (AuthDoor, GTPDoor), DNS tunneling and exploitation of legacy system vulnerabilities. Read the full article: https://bit.ly/45t7aoj

126

🚨 𝗙𝗼𝗿𝘁𝗶𝗻𝗲𝘁 𝗦𝗦𝗟 𝗩𝗣𝗡 𝗙𝗮𝗰𝗲𝘀 𝗖𝗼𝗼𝗿𝗱𝗶𝗻𝗮𝘁𝗲𝗱 𝗕𝗿𝘂𝘁𝗲 𝗙𝗼𝗿𝗰𝗲 𝗔𝘁𝘁𝗮𝗰𝗸 𝗳𝗿𝗼𝗺 𝟳𝟴𝟬 𝗜𝗣𝘀 🚨 | Read more: https://lnkd.in/gHmEYN7c On August 3, 2025, Fortinet SSL VPN infrastructure was hit by its largest single-day brute force campaign in months — over 780 unique IPs took part. GreyNoise researchers spotted two distinct attack waves, with traffic shifting from FortiOS to FortiManager FGFM profiles, pointing to targeted probing for vulnerabilities. Some malicious traffic even originated from residential ISPs, hinting at compromised home networks or proxy abuse. With 80% of similar campaigns followed by CVE disclosures within six weeks, organizations using Fortinet should act now — enhance monitoring, block identified IP ranges, and stay alert for vendor updates. #CyberSecurity #Fortinet #VPN #ThreatIntelligence #Infosec #CVE #NetworkSecurity #BruteForceAttack

43

5 comentários

Microsoft has released its September security updates. This included: • 81 vulnerabilities patched. • 0 vulnerabilities with evidence of exploitation. • 9 'Critical' rated. The ASD’s ACSC encourages all users to apply the available patch updates ASAP👉 https://lnkd.in/dHpTjmk8

91

1 comentário

[TRAINING] Attacking Web Applications 🏴 Web applications represent a large part of the attack surface exposed on the Internet. With technology constantly evolving, new vulnerabilities and exploitation methods continue to emerge, making intrusion stages more complex. To address this, our ninjas have designed an intensive 5-day training course based on their experience in #pentesting. What you will learn: ▪️ Understand the security mechanisms of modern web applications. ▪️ Refine your intrusion methods to exploit the most complex vulnerabilities. ▪️ Master the specifics of languages and frameworks such as Java, PHP, Python, and ASP.NET. This 35-hour training course includes more than 30 practical exercises to help you quickly develop your skills. 🗓️ 17 to 21 November 2025 💰 €4500 per person 🎯 Penetration testers and developers with experience in web intrusion techniques ℹ️ https://lnkd.in/evdSDSAk Ready to take your skills to the next level? Join us and become an expert in web application auditing. 🔗 To find out more and register, contact us at [email protected]

31

Cybercrime loves .NET At the AMTSO Cyber Research Conference 2025 in Lisbon, OPSWAT’s Dani' R., Threat Research Lead, will uncover why .NET has become a go-to for cybercriminals, fueling evasive, modular malware and powering threats like Roboski (TicTacToe). Join us on the 13th & 14th of October to learn how deeper, context-aware analysis is key to stopping today’s .NET malware. https://hubs.la/Q03MWkY_0

32

1 comentário