TBK DVR Authentication Bypass Attack
FortiGuard Labs observed „Critical“ level of attack attempts to exploit an Authentication Bypass Vulnerability in TBK DVR devices (4104/4216) with upto more than 50,000+ unique IPS detections in the month …
Hikvision IP Cameras Command Injection Vulnerability
Due to the insufficient input validation, an attacker can exploit the vulnerability to launch a command injection attack by sending crafted messages with malicious commands.
Mitel MiCollab Unauthorized Access Attack
Security flaws in Mitel MiCollab, CVE-2024–35286, CVE-2024–41713, and an arbitrary file read zero-day (still without a CVE number) have been found, putting many organizations at risk. These vulnerabilities allow attackers …
Palo Alto Networks Management Interface Attack
Palo Alto Networks has recently disclosed two zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, affecting the PAN-OS firewall and other products. Both flaws, which are actively being exploited in the wild, affect …
Progress Kemp LoadMaster OS Command Injection Vulnerability
FortiGuard sensors detect attack attempts targeting the Progress Kemp LoadMaster (CVE-2024-1212), successful exploitation enables unauthenticated remote attackers to access the system through the LoadMaster management interface granting them full access …
Palo Alto Expedition Missing Authentication Vulnerability
FortiGuard sensors continue to detect and block attack attempts targeting the Palo Alto Expedition vulnerability (CVE-2024-5910). Successful exploitation, this vulnerability could allow attackers to take over administrative accounts, putting configuration …
Mallox Ransomware
FortiGuard Labs continue to see increase in Mallox ransomware related activities detecting Mallox ransomware on multiple hundred FortiGuard sensors. Ransomware infection may cause disruption, damage to daily operations, potential impact …
Synacor Zimbra Collaboration Command Execution Vulnerability
Hackers are exploiting a recently fixed RCE vulnerability in Zimbra email servers, which can be exploited just by sending specially crafted emails to the SMTP server.
GeoServer RCE Attack
A remote code execution vulnerability within GeoServer is currently under active exploitation, with recent incidents targeting 40,000 sensors. This vulnerability is being exploited by the Earth Baxia APT group, as …
Russian Cyber Espionage Attack
FortiGuard Labs continues to observe attack attempts exploiting the vulnerabilities highlighted in the recent CISA advisory about Russian military cyber actors. These actors are targeting U.S. and global critical infrastructure …