NEWS · INTELLIGENCE
FortiAuthenticator and FortiSandbox critical security fixes
Fortinet issued fixes for serious vulnerabilities affecting authentication and threat-analysis products that could enable unauthorized command execution.
Read article ↗VALUE360 / INSIGHTS
Ideas, updates and technical insight.
Articles, practical guides and perspectives on IT, cloud and cybersecurity.
NEWS · INTELLIGENCE
FortiClient EMS emergency patch for exploited flaw
Fortinet released an emergency fix for CVE-2026-35616 in FortiClient Enterprise Management Server following reports of exploitation.
Read article ↗
NEWS · INTELLIGENCE
Outlook add-in hijack illustrates third-party identity risk
An abandoned Outlook add-in became a phishing vector after attackers gained control over its external web endpoint.
Read article ↗NEWS · INTELLIGENCE
ClickFix campaigns abuse trusted Windows components
A ClickFix variant combines fake CAPTCHA prompts with Windows App-V scripting to induce command execution and deliver infostealer malware.
Read article ↗
NEWS · INTELLIGENCE
FortiSIEM exploitation highlights monitoring platform exposure
Exploitation of CVE-2025-64155 in FortiSIEM highlights the risks when the monitoring platform itself remains vulnerable.
Read article ↗
NEWS · INTELLIGENCE
Microsoft 365 device-code phishing: a different path to account access
Phishing campaigns trick users into entering device codes on a legitimate Microsoft page, authorizing an attacker-controlled sign-in flow.
Read article ↗
NEWS · INTELLIGENCE
Clop targets CentreStack file-sharing infrastructure
Clop-associated activity targeted internet-exposed Gladinet CentreStack systems used for enterprise file sharing.
Read article ↗NEWS · INTELLIGENCE
November 2025 Patch Tuesday included an exploited zero-day
Microsoft’s November 2025 security release addressed dozens of vulnerabilities, including an actively exploited zero-day.
Read article ↗
NEWS · INTELLIGENCE
Fake Microsoft Teams installers leveraged in ransomware campaigns
Microsoft disrupted campaigns that impersonated Microsoft Teams download pages to distribute malicious installers and establish initial access.
Read article ↗