Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

FortiManager

Everything RedTeam Tribune has reported about FortiManager: 2 stories, newest first. Part of our Malware & Ransomware coverage.

16 Oct
Cyber Attacks

FortiManager Missing Auth Bug Lets Rogue Devices Steal 500 Firewall Keys

Attackers exploited a missing-authentication flaw in FortiManager to steal credentials for hundreds of downstream firewalls, deploying the PEERSTITCH implant to maintain stealthy access.

16 Oct
Malware & Ransomware

PEERSTITCH Implant Hijacks FortiGate Processes via FortiManager Breach

Attackers used a missing-auth flaw and path traversal to deploy memory-resident malware on FortiGate firewalls, stealing configs and credentials.