Threat Signal

The Threat Signal created by the FortiGuard Labs is intended to provide you with insight on emerging issues that are trending within the cyber threat landscape. The Threat Signal will provide concise technical details about the issue, mitigation recommendations and a perspective from the FortiGuard Labs team in an FAQ style format.

Whether it’s significant vulnerability disclosures including high profile zero days, coordinated announcements with Cyber Threat Alliance partners, malware of significance, or any threat making the news cycle, FortiGuard Threat Signals are there for you.

FortiGuard Labs is aware of multiple reports that the Iranian train system was attacked using a previously unknown wiper m...

Jul 30, 2021 TLP Level: Threat Level: MED ID: 35
FortiGuard Labs is aware of a new variant of the LockBit ransomware, specifically version 2.0. LockBit 2.0 is ransomware a...

Jul 28, 2021 TLP Level: Threat Level: MED ID: 34
On July 20th, 2021, Carnegie Mellon University's CERT Coordination Center publicly disclosed information on an un-patched ...

Jul 21, 2021 TLP Level: Threat Level: MED ID: 31
On July 19th, a joint cybersecurity advisory was issued by the United States Federal Bureau of Investigation (FBI) and the...

Jul 20, 2021 TLP Level: Threat Level: MED ID: 30
Today, the United States Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (...

Jul 20, 2021 TLP Level: Threat Level: MED ID: 29
FortiGuard Labs is aware of a report that a commercially sold spyware "DevilsTongue" infected more than 100 victims by lev...

Jul 15, 2021 TLP Level: Threat Level: MED ID: 28
Update as of July 14, 2021 - Microsoft has published a blog post on the attack that took advantage of the vulnerability an...

Jul 13, 2021 TLP Level: Threat Level: MED ID: 26
FortiGuard Labs is aware of reports of new active in-the-wild exploitation of CVE-2020-3580, which is a cross site scripti...

Jun 25, 2021 TLP Level: Threat Level: MED ID: 22
FortiGuard Labs is aware of reports of a recently discovered rootkit named NetFilter. Netfilter, discovered by security r...

Jun 18, 2021 TLP Level: Threat Level: MED ID: 21
The United States Cybersecurity and Infrastructure Security Agency (CISA) published a malware analysis report (MAR) on the...

May 06, 2021 TLP Level: Threat Level: MED ID: 17
FortiGuard Labs is aware of recent reports of the N3TW0RM ransomware surfacing in attacks targeting organizations in Israe...

May 04, 2021 TLP Level: Threat Level: MED ID: 15
Today, The United States Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA...

Feb 16, 2021 TLP Level: Threat Level: MED ID: 5
The FortiEDR team has discovered a new ransomware variant named DarkWorld. FortiGuard Labs has confirmed this ransomware i...

Jan 21, 2021 TLP Level: Threat Level: MED ID: 2
Editorial Note: This Threat Signal was created by FortiGuard Labs using all of the information we had available to us on D...

Dec 09, 2020 TLP Level: Threat Level: MED ID: 40
Researchers at the University of Graz published a white paper on a new software based side channel attack, dubbed PLATYPUS...

Nov 11, 2020 TLP Level: Threat Level: MED ID: 38