Security Archives Page 28 of 28126 | Cyberthreat Blog from Fortify24x7

Can a Global, Decentralized System Save CVE Data?

by Cyberthreat Blog | Nov 18, 2025 | DARKREADING | 0 |

As vulnerabilities in the Common Vulnerabilities and Exposures ecosystem pile up, one Black Hat...

SQL injections in voice and administrative interface

by Cyberthreat Blog | Nov 18, 2025 | Fortinet PSIRT Advisories | 0 |

CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command (‘SQL Injection’) vulnerability [CWE-89] in FortiVoice may allow an authenticated attacker to execute unauthorized code or...

Trusted hosts bypass via SSH

by Cyberthreat Blog | Nov 18, 2025 | Fortinet PSIRT Advisories | 0 |

CVSSv3 Score: 1.8 An Improper Privilege Management vulnerability [CWE-269] in FortiOS, FortiProxy and FortiPAM may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command. Revised on...

5th NIST Quantum Matters in Material Sciences (QMMS) Workshop

by Cyberthreat Blog | Nov 18, 2025 | NIST | 0 |

The 5th Quantum Matters in Materials Science (QMMS) workshop organized by the National Institute of Standards and Technology (NIST) will be held as an in-person only event at the NIST Gaithersburg campus, Maryland on February...

Stack buffer overflow in CAPWAP daemon

by Cyberthreat Blog | Nov 18, 2025 | Fortinet PSIRT Advisories | 0 |

CVSSv3 Score: 6.9 A stack-based overflow vulnerability [CWE-124] in FortiOS and FortiSwitchManager CAPWAP daemon may allow a remote authenticated attacker to execute arbitrary code or command as a low privileged user via...

Bug Bounty Programs Rise as Key Strategic Security Solutions

by Cyberthreat Blog | Nov 18, 2025 | DARKREADING | 0 |

Bug bounty programs create formal channels for organizations to leverage external security...

Use of hardcoded password for the redis service

by Cyberthreat Blog | Nov 18, 2025 | Fortinet PSIRT Advisories | 0 |

CVSSv3 Score: 4.8 A use of hard-coded credentials vulnerability [CWE-798] in the internal redis services in FortiWeb may allow an authenticated attacker with shell access to the device to connect to any running redis service and...

Malicious Npm Packages Abuse Adspect Cloaking in Crypto Scam

by Cyberthreat Blog | Nov 18, 2025 | DARKREADING | 0 |

A malware campaign presents fake websites that can check if a visitor is a potential victim or a...

KongTuke activity, (Tue, Nov 18th)

by Cyberthreat Blog | Nov 17, 2025 | SANS ISC Bulletins | 0 |

Introduction Today’s diary is an example of KongTuke activity using fake CAPTCHA pages for a...

US Citizens Plead Guilty to Aiding North Korean IT Worker Campaigns

by Cyberthreat Blog | Nov 17, 2025 | DARKREADING | 0 |

Four individuals admitted to assisting foreign IT workers in gaining employment at US companies by...

Critical Fortinet FortiWeb WAF Bug Exploited in the Wild

by Cyberthreat Blog | Nov 17, 2025 | DARKREADING | 0 |

The vulnerability could allow an unauthenticated attacker to remotely execute administrative...

Cursor Issue Paves Way for Credential-Stealing Attacks

by Cyberthreat Blog | Nov 17, 2025 | DARKREADING | 0 |

Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP...

Category: Security