[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:fortinet":3},{"vendor":4,"products":15,"links":38,"research":60,"news":113,"iocs":166,"iocs_total":235,"activity":236},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"fortinet","Fortinet","fortinet.com","https:\u002F\u002Fwww.fortinet.com\u002F","US","Maker of FortiGate firewalls and a broad network security portfolio. FortiGuard Labs does its threat research.","\u002Fvendor-logos\u002Ffortinet.png","#da291c","Fortinet delivers cybersecurity everywhere you need it. We secure the entire digital attack surface from devices, data, and apps and from data center to home office.","2026-10-16T13:44:12.061861+00:00",[16,27],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"fortigate","FortiGate","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Fnext-generation-firewall","Next-generation firewalls with intrusion prevention and SD-WAN.","Learn how Fortinet next-generation firewall (NGFW) products can provide high-performance & consolidated security. Get end-to-end network protection.",[23],{"slug":24,"name":25,"problem":26},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":28,"name":29,"url":30,"description":31,"pitch":32,"pitch_source_url":30,"controls":33},"fortideceptor","FortiDeceptor","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Ffortideceptor","Deception platform that deploys decoys to expose attacks coming from outside or inside the network.","FortiDeceptor provides early detection and isolation of sophisticated human and automated attacks by deceiving attackers into revealing themselves.",[34],{"slug":35,"name":36,"problem":37},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",[39,43,47,51,54,57],{"kind":40,"label":41,"url":42},"advisories","PSIRT advisories","https:\u002F\u002Fwww.fortiguard.com\u002Fpsirt",{"kind":44,"label":45,"url":46},"research","FortiGuard Labs threat research","https:\u002F\u002Fwww.fortinet.com\u002Fblog\u002Fthreat-research",{"kind":48,"label":49,"url":50},"review","CyberRatings 2025 Q4 Enterprise Firewall Report: Fortinet follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-fortinet-follow-on\u002F",{"kind":48,"label":52,"url":53},"CyberRatings 2025 Q1 Cloud Network Firewall Report: Fortinet","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q1-cloud-network-firewall-report-fortinet\u002F",{"kind":48,"label":55,"url":56},"Gartner Peer Insights: FortiGate Next-Generation Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Ffortigate-next-generation-firewall-2077436483",{"kind":48,"label":58,"url":59},"PeerSpot: Fortinet FortiGate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Ffortinet-fortigate-reviews",{"total":61,"stories":62},34,[63,68,73,78,83,88,93,98,103,108],{"slug":64,"title":65,"published_at":66,"brief":67},"hackers-use-2-700-passwords-to-break-into-microsoft-sql-servers-and-deploy-remot-8fab91","Hackers Use 2,700 Passwords to Break Into Microsoft SQL Servers and Deploy Remote Access Malware","2026-11-13T14:54:56+00:00","Hackers exploit weak passwords to compromise Microsoft SQL Servers, deploying malware for crypto mining and remote",{"slug":69,"title":70,"published_at":71,"brief":72},"tinstaporn-android-malware-poses-as-casino-app-to-collect-user-data-866ed6","TinstaPorn Android Malware Poses as Casino App to Collect User Data","2026-11-11T12:50:06+00:00","TinstaPorn Android malware disguises itself as a casino app to steal user data.",{"slug":74,"title":75,"published_at":76,"brief":77},"bitter-hackers-deploy-new-paprat-backdoor-in-cyberespionage-campaign-targeting-s-99ca2c","Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia","2026-11-09T14:31:29+00:00","Bitter APT deploys new PapRAT backdoor targeting South Asian organizations in cyberespionage campaign.",{"slug":79,"title":80,"published_at":81,"brief":82},"hackers-use-malicious-vhdx-files-and-webdav-links-to-infect-windows-devices-with-05fcd2","Hackers Use Malicious VHDX Files and WebDAV Links to Infect Windows Devices With PapRAT Malware","2026-11-03T06:44:36+00:00","BITTER APT group deploys PapRAT malware via malicious VHDX files and WebDAV links targeting South Asian organizations.",{"slug":84,"title":85,"published_at":86,"brief":87},"bitter-apt-using-fake-diplomatic-documents-to-deliver-paprat-spyware-73b5a3","BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware","2026-11-02T14:01:36+00:00","BITTER APT targets South Asian organizations with PapRAT spyware via social engineering.",{"slug":89,"title":90,"published_at":91,"brief":92},"fortinet-brings-ai-agent-security-to-oracle-cloud-to-block-prompt-injection-and-064dd6","Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks","2026-10-29T02:46:10+00:00","Fortinet's FortiAIGate now secures AI agents on Oracle Cloud Infrastructure.",{"slug":94,"title":95,"published_at":96,"brief":97},"linux-backdoor-abuses-stun-protocol-exploits-dozens-of-flaws-d968cf","Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws","2026-10-05T13:00:00+00:00","Linux backdoor ClingSTUN abuses STUN protocol and exploits dozens of vulnerabilities for propagation.",{"slug":99,"title":100,"published_at":101,"brief":102},"fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks-b4ba5b","Fortinet warns of critical FortiMail flaw exploited in zero-day attacks","2026-10-01T22:42:49+00:00","Fortinet warns of critical FortiMail vulnerability CVE-2026-104286 exploited in zero-day attacks.",{"slug":104,"title":105,"published_at":106,"brief":107},"sectoprat-abuses-legitimate-audio-software-files-to-steal-pc-data-b7bb22","SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data","2026-09-25T10:43:28+00:00","SectopRAT variant hidden in modified audio software files steals PC data and enables remote control.",{"slug":109,"title":110,"published_at":111,"brief":112},"critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-the-wild-c8cb9c","Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild","2026-09-19T08:18:54+00:00","Critical pre-auth RCE in Orkes Conductor exploited in the wild.",{"total":114,"stories":115},109,[116,121,126,131,136,141,146,151,156,161],{"slug":117,"title":118,"published_at":119,"brief":120},"fortinet-patches-nearly-100-vulnerabilities-56bcf2","Fortinet Patches Nearly 100 Vulnerabilities","2026-11-11T12:10:14+00:00","Fortinet patched nearly 100 vulnerabilities, including 17 critical flaws, across its product line.",{"slug":122,"title":123,"published_at":124,"brief":125},"ics-patch-tuesday-siemens-flags-high-severity-flaws-node2shell-exposure-4c8dd5","ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure","2026-11-11T10:35:15+00:00","Siemens, Schneider Electric, and other ICS vendors release advisories for multiple vulnerabilities.",{"slug":127,"title":128,"published_at":129,"brief":130},"critical-fortinet2shell-vulnerability-enables-rce-attacks-in-forticlient-with-fo-0d0b21","Critical Fortinet2Shell Vulnerability Enables RCE Attacks in FortiClient with FortiPAM Enabled","2026-11-11T07:05:55+00:00","Fortinet warns of critical FortiClient RCE flaw CVE-2026-121529, CVSS 9.1, affecting Mac and Windows.",{"slug":132,"title":133,"published_at":134,"brief":135},"critical-fortinet-flaws-expose-fortimanager-and-fortianalyzer-to-remote-code-exe-5ba18f","Critical Fortinet Flaws Expose FortiManager and FortiAnalyzer to Remote Code Execution Without Login","2026-11-11T03:15:16+00:00","Fortinet disclosed critical vulnerabilities in FortiManager, FortiAnalyzer, and FortiOS, allowing RCE without login.",{"slug":137,"title":138,"published_at":139,"brief":140},"volt-typhoon-targeted-enterprise-control-planes-via-ever-changing-silent-train-r-7b3ca4","Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network","2026-10-29T13:42:13+00:00","Volt Typhoon deploys Silent Train relay network using compromised devices to target US critical infrastructure control",{"slug":142,"title":143,"published_at":144,"brief":145},"volt-typhoon-used-silent-train-to-hide-zero-day-attacks-c9f2d1","Volt Typhoon Used Silent Train to Hide Zero-Day Attacks","2026-10-29T10:34:54+00:00","Volt Typhoon used Silent Train to hide zero-day attacks on critical systems.",{"slug":147,"title":148,"published_at":149,"brief":150},"fortibleed-2-0-reveals-thousands-of-fortinet-vpn-and-active-directory-credential-639222","FortiBleed 2.0 Reveals Thousands of Fortinet VPN and Active Directory Credentials in Exposed Configurations","2026-10-28T10:19:22+00:00","FortiBleed 2.0 exposes 40,573 cleartext credential records from Fortinet FortiGate configurations including VPN and",{"slug":152,"title":153,"published_at":154,"brief":155},"fortinet-patches-critical-fortios-flaws-found-with-ai-help-307213","Fortinet patches critical FortiOS flaws found with AI help","2026-10-26T11:22:52+00:00","Fortinet patches critical FortiOS flaws found with AI help, details withheld until Nov 2026.",{"slug":157,"title":158,"published_at":159,"brief":160},"hackers-breach-enterprise-firewalls-and-vpns-exposing-over-70-000-credentials-64b0ac","Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials","2026-10-23T13:50:56+00:00","Hackers exploited enterprise firewalls and VPNs, exposing over 70,000 credentials.",{"slug":162,"title":163,"published_at":164,"brief":165},"critical-fortisiem-flaw-gets-public-exploit-poc-for-unauthenticated-remote-code-584d35","Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution","2026-10-20T15:38:52+00:00","Fortinet FortiSIEM critical path traversal flaw gets public exploit PoC for RCE.",[167,170,172,174,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,218,220,222,224,228,230,234],{"type":168,"value":169,"article_slug":117,"article_title":118,"published_at":119},"malware","Fortinet2Shell",{"type":168,"value":171,"article_slug":122,"article_title":123,"published_at":124},"Node2Shell",{"type":168,"value":173,"article_slug":122,"article_title":123,"published_at":124},"PHP2Shell",{"type":175,"value":176,"article_slug":127,"article_title":128,"published_at":129},"cve","CVE-2026-121529",{"type":175,"value":178,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126170",{"type":175,"value":180,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126229",{"type":175,"value":182,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126253",{"type":175,"value":184,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126254",{"type":175,"value":186,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126259",{"type":175,"value":188,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126260",{"type":175,"value":190,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126261",{"type":175,"value":192,"article_slug":132,"article_title":133,"published_at":134},"CVE-2026-126262",{"type":175,"value":194,"article_slug":137,"article_title":138,"published_at":139},"CVE-2024-39717",{"type":175,"value":196,"article_slug":137,"article_title":138,"published_at":139},"CVE-2025-8875",{"type":175,"value":198,"article_slug":137,"article_title":138,"published_at":139},"CVE-2025-8876",{"type":175,"value":200,"article_slug":137,"article_title":138,"published_at":139},"CVE-2026-16812",{"type":175,"value":202,"article_slug":137,"article_title":138,"published_at":139},"CVE-2026-20127",{"type":168,"value":204,"article_slug":137,"article_title":138,"published_at":139},"KeyDrift",{"type":168,"value":206,"article_slug":142,"article_title":143,"published_at":144},"KV-botnet",{"type":168,"value":208,"article_slug":147,"article_title":148,"published_at":149},"Cavalier",{"type":168,"value":210,"article_slug":147,"article_title":148,"published_at":149},"FortiBleed 2.0",{"type":175,"value":212,"article_slug":162,"article_title":163,"published_at":164},"CVE-2026-106173",{"type":175,"value":214,"article_slug":215,"article_title":216,"published_at":217},"CVE-2024-26008","exploited-fortinet-bug-linked-to-stealthy-fortigate-implant-in-telecom-hack-688895","Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack","2026-10-19T11:13:23+00:00",{"type":175,"value":219,"article_slug":215,"article_title":216,"published_at":217},"CVE-2024-47575",{"type":175,"value":221,"article_slug":215,"article_title":216,"published_at":217},"CVE-2025-61624",{"type":168,"value":223,"article_slug":215,"article_title":216,"published_at":217},"PeerStitch",{"type":175,"value":221,"article_slug":225,"article_title":226,"published_at":227},"cisa-adds-two-known-exploited-vulnerabilities-to-catalog-ae4608","CISA Adds Two Known Exploited Vulnerabilities to Catalog","2026-10-16T12:00:00+00:00",{"type":175,"value":229,"article_slug":225,"article_title":226,"published_at":227},"CVE-2026-102764",{"type":175,"value":219,"article_slug":231,"article_title":232,"published_at":233},"peerstitch-malware-deployed-via-fortios-flaw-bypasses-checks-on-tagged-vpn-sessi-a2dfa0","PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions","2026-10-16T04:59:36+00:00",{"type":175,"value":221,"article_slug":231,"article_title":232,"published_at":233},344,[237,241,244,248,252,254],{"month":238,"reported":239,"affected":240},"2026-06-01",3,21,{"month":242,"reported":239,"affected":243},"2026-07-01",12,{"month":245,"reported":246,"affected":247},"2026-08-01",7,8,{"month":249,"reported":250,"affected":251},"2026-09-01",2,5,{"month":253,"reported":239,"affected":240},"2026-10-01",{"month":255,"reported":256,"affected":257},"2026-11-01",6,4]