6 articles
Critical vulnerability allows attackers with a FortiCloud account to access Fortinet devices registered by other organizations. CISA added it to the KEV catalog with a CVSS score of 9.4.
2025 will be remembered for one dominant trend: attackers systematically targeted the connections between organizations rather than organizations themselves.
The Crimson Collective claimed 570GB from Red Hat's GitLab, including 800 Customer Engagement Reports with credentials, VPN configs, and infrastructure details for major enterprises.
A ransomware attack on Collins Aerospace's MUSE system halted passenger processing at Heathrow, Brussels, and Berlin airports. One vendor, one attack, industry-wide disruption.
The largest credential breach in history exposed 16 billion credentials from infostealers. Session tokens, not just passwords, are changing the game for attackers.
CVE-2025-5777 echoes the devastating CitrixBleed from 2023. Same product, same attack class, same devastating impact on NetScaler ADC and Gateway appliances.