Broadcom Wi-Fi RCE Needs Zero Auth - Just Proximity
Unpatched Broadcom Wi-Fi chipset flaw gives root via radio range. ConnectWise Cloud Backup MSP supply chain compromise. SiteGuard WAF zero-day exploited.
Posts tagged: Fortinet
SonicWall CVSS 10 SSRF - FortiGate 86K Cred Theft
SonicWall SMA1000 pre-auth SSRF scores CVSS 10.0. FBI warns of 86K stolen FortiGate VPN credentials. CVE-2026-21589 Atlassian exploited in 2 hours.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
FortiMail Zero-Day CVE-2026-104286 Exploited
CVE-2026-104286 FortiMail zero-day actively exploited, CISA KEV-listed. Plus GlobalProtect CVE-2026-0250 and Pentagon HR breach of 3M records.
Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
FortiBleed Attribution - Russian IAB, 110M Credentials
Russian IAB behind FortiBleed siphoned 110M VPN credentials since February. FFmpeg PixelSmash RCE hits media servers. Squidbleed leaks cleartext creds.
Splunk Enterprise RCE Exploited - CVE-2026-20253
CVE-2026-20253 Splunk RCE exploited in the wild with a Sunday CISA deadline. Accenture buys Dragos for $4.1B. FortiBleed hits 86K devices.
FortiBleed Dumps 73K VPN Credentials - CVE-2026-48907
FortiBleed leaks VPN credentials for 73,000 FortiGate devices. F5 patches critical NGINX RCE flaws. Cisco ISE root exploit patched.
Cisco SD-WAN Zero-Day CVE-2026-20262 Exploited in Wild
CVE-2026-20262 hits Cisco SD-WAN Manager with active exploitation. FortiSandbox triple-CVE exploit chain and UNC6508 year-long espionage campaign via Googl.