Cisco ASA/FTD DoS Exploited - CVE-2026-20349
CVE-2026-20349 crashes Cisco firewalls via unauthenticated HTTP. SharePoint CVE-2026-55040 exploited hours after PoC. Fortinet auth bypass patched.
Posts tagged: Fortinet
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
FortiBleed Attribution - Russian IAB, 110M Credentials
Russian IAB behind FortiBleed siphoned 110M VPN credentials since February. FFmpeg PixelSmash RCE hits media servers. Squidbleed leaks cleartext creds.
Splunk Enterprise RCE Exploited - CVE-2026-20253
CVE-2026-20253 Splunk RCE exploited in the wild with a Sunday CISA deadline. Accenture buys Dragos for $4.1B. FortiBleed hits 86K devices.
FortiBleed Dumps 73K VPN Credentials - CVE-2026-48907
FortiBleed leaks VPN credentials for 73,000 FortiGate devices. F5 patches critical NGINX RCE flaws. Cisco ISE root exploit patched.
Cisco SD-WAN Zero-Day CVE-2026-20262 Exploited in Wild
CVE-2026-20262 hits Cisco SD-WAN Manager with active exploitation. FortiSandbox triple-CVE exploit chain and UNC6508 year-long espionage campaign via Googl.
PAN-OS IKEv2 and DNS Proxy RCEs - CVE-2026-0263
CVE-2026-0263 and CVE-2026-0264 deliver RCE in PAN-OS VPN and DNS processing. FortiClient EMS CVE-2026-35616 exploited in the wild.
FortiGate - Configuration (Part 4) - Administration and Management setup | Active Directory Setup | Administration with AD Group Membership
Integrate FortiGate with Active Directory - create the LDAP service account, grab the Domain DN, and grant admin access by AD group membership.
FortiGate - Configuration (Part 1) - Interfaces and Getting Started
Set up a FortiGate from scratch - VLAN plan for two ISPs, inside LAN, and management - plus port assignments to prep for social-media filtering and AV.
FortiGate - Configuration (Part 2) - Static Routes | Firewall Policies | Port Address Translation for Internet
Configure FortiGate static routes for dual ISP failover, build firewall policies, and enable PAT - use priority and distance to set primary vs backup.