Fortiguard Labs

Latest News

outbreakalert-logo Outbreak Alert

PAN-OS GlobalProtect Command Injection Vulnerability
Apr 12, 2024

The on-going attack on PAN-OS GlobalProtect devices identified as CVE-2024-3400 allows a malicious actor to remotely exploit an unauthenticated OS Command Injection vulnerability. Once established, the attacker can further collect configurations,...

signalreport-logo Threat Signal Report

PAN-OS Critical Flaw in GlobalProtect Gateway (CVE-2024-3400)
Apr 12, 2024

What is the vulnerability/attack? A critical unauthenticated remote code injection vulnerability in the PAN-OS GlobalProtect Gateway was discovered. This vulnerability tracked under CVE-2024-3400 has a CVSS rating of 10.0. The GlobalProtect...

outbreakalert-logo Outbreak Alert

Sunhillo SureLine Command Injection Attack
Apr 09, 2024

FortiGuard Labs continues to see targeted attacks affecting a vulnerability, identified as CVE-2021-36380, that enables a malicious actor to establish an interactive conduit, gaining command over the targeted system and potentially achieving full...

signalreport-logo Threat Signal Report

XZ Utils Supply Chain Attack (CVE-2024-3094)
Apr 01, 2024

What is the vulnerability/attack? A malicious code was discovered embedded in the XZ Utils, a data compression software included in major Linux distributions. This vulnerability tracked under CVE-2024-3094 results from a supply chain attack...

outbreakalert-logo Outbreak Alert

Nice Linear eMerge Command Injection Vulnerability
Mar 26, 2024

The vulnerability tracked as CVE-2019-7256 affecting an access control system called Linear eMerge E3-Series is affected by an OS command injection flaw that could allow an attacker to cause remote code execution and full access to the system.

signalreport-logo Threat Signal Report

Kimsuky Malware Attack
Mar 25, 2024

What is the Kimsuky Malware Attack? Kimsuky, officially known as the Kim Suky Group, is a cyber-espionage group linked to North Korea. The group has been active since at least 2012 and is primarily focused on gathering intelligence...

Certifications

  • av comparatives logo
  • common criteria logo
  • nss labs logo
  • vb logo
  • mitre logo