Fortiguard Labs
Latest News
Outbreak Alert
Lazarus RAT Attack
Dec 12, 2023A new campaign conducted by the Lazarus Group is seen employing new DLang-based Remote Access Trojans (RATs) malware in the wild. The APT groups has been seen to target manufacturing, agricultural and physical security companies by exploiting the...
Threat Signal Report
F5 BIG-IP Configuration Utility Authentication Bypass (CVE-2023-46747)
Nov 09, 2023The vulnerability allows an unauthenticated attacker to exploit an authentication bypass vulnerability in F5 BIG-IP system. The exploit requires a network access through the management port to execute arbitrary system commands. F5 has warned...
Threat Signal Report
Atlassian Confluence Unauthorized Admin Account (CVE-2023-22515)
Nov 08, 2023The vulnerability attack is targeting an authentication bypass flaw in Atlassian Confluence Server and Confluence Data Center. The vulnerability is due to insufficient validation of user-supplied inputs. A successful exploitation may create an...
Outbreak Alert
Apache ActiveMQ Ransomware Attack
Nov 06, 2023Ransomware attackers are targeting servers running outdated and vulnerable versions of Apache ActiveMQ by exploiting a recently fixed vulnerability (CVE-2023-46604).
Outbreak Alert
Citrix Bleed Attack
Nov 02, 2023CVE-2023-4966 is being widely exploited, with multiple threat actors, including ransomware groups, targeting internet-accessible NetScaler ADC and Gateway instances. After exploiting CVE-2023-4966, the attackers may engage in network...
Publications
[BruCON 2023] The Mobile Malware Maze
Oct 24, 2023In this keynote presentation, we will delve into the fascinating evolution of mobile malware over the past 15 years.Exploring the realms of Symbian OS and Java ME, we will showcase early instances of mobile malware and their impact. With the...
Services
-
Network -
Application -
Files and Endpoint -
Security Operations
Select one for more details:
-
Anti-recon and Exploit
-
Botnet Domain Reputation DB
-
Data Loss Prevention
-
Indicators of Compromise
-
Intrusion Protection
-
IP Reputation/Anti-Botnet
-
Internet Services
-
Secure DNS
-
Application Control
-
Web Application Security (FADC)
-
Client Application Firewall
-
Web Application Security (FWB)
-
Operational Technology Security Service
-
IOT Application
-
Web Filtering
