Fortinet discloses a critical FortiManager API flaw being exploited in 0-day attacks to steal sensitive files, after warning customers privately over a week ago
Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited …
BleepingComputer Lawrence Abrams
Related Coverage
- PSIRT — Missing authentication in fgfmsd — Summary — A missing authentication … FortiGuard Labs
- Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs DoublePulsar · Kevin Beaumont
- FortiGate admins report active exploitation 0-day. Vendor isn't talking. Ars Technica · Dan Goodin
- ‘Critical’ FortiManager Flaw Has Seen Exploitation Since June: Mandiant CRN · Kyle Alspach
- Mandiant says new Fortinet flaw has been exploited since June BleepingComputer · Lawrence Abrams
- New Fortinet FortiManager bug subjected to months-long exploitation SC Media
- Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575) Google Cloud Blog
- The “FortiJump” flaw (CVE-2024-47575) has been exploited in zero-day attacks since June 2024, impacting over 50 servers, says Mandiant. Security Affairs · Pierluigi Paganini
- Critical Fortinet vulnerability finds zero-day RCE exploits CSO · Shweta Sharma
- New Fortinet Zero-Day Exploited For Months Before Patch SecurityWeek · Eduard Kovacs
- ‘Act now’ - ACSC issues critical alert for exploited FortiManager vulnerability Cyber Daily · Daniel Croft
- Fortinet Zero-Day Exposed: Exploits Target Critical Data Globally WinBuzzer · Luke Jones
- Warning! FortiManager critical vulnerability under active attack The Register · Iain Thomson
- Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation The Hacker News
- Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575) Help Net Security · Zeljka Zorz
- Fortinet admits critical security flaw hitting FortiManager TechRadar
- Fortinet discloses critical zero-day flaw in FortiManager TechTarget · Alexander Culafi
- CVE-2024-47575: Frequently Asked Questions About FortiJump Zero-Day in FortiManager and FortiManager Cloud Security Boulevard
- Fortinet releases patches for undisclosed critical FortiManager vulnerability Help Net Security · Zeljka Zorz
- Fortinet Confirms Zero-Day Exploit Targeting FortiManager Systems SecurityWeek · Ryan Naraine
- Fortinet Discloses Actively Exploited Zero-Day BankInfoSecurity.com · David Perera
- High-severity FortiManager bug being exploited by hackers The Record · Jonathan Greig
- Fortinet Discloses Actively Exploited Zero-Day PaymentSecurity.io · David Perera
- Fortinet: ‘Critical’ FortiManager Vulnerability Is Seeing Exploitation CRN · Kyle Alspach
- Fortinet confirms zero day exploitation: Pre-auth RCE now allocated CVE-2024-47575 The Stack · Edward Targett
- FortiJump: Yet Another Critical Fortinet 0-Day RCE Security Boulevard · Richi Jennings
- The Reddit threads on this have been something. Advisory and CVE finally available for the #FortiManager 0day that's been knocking around social media, trust circles, and customer email inboxes for a week+ now. … @catc0n@infosec.exchange · Caitlin Condon
Discussion
-
@mandiant
@mandiant
on x
🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat. Read more -> https://cloud.google.com/... #ThreatIntelligence [image]
-
@richi
@richi
on x
FortiFAIL: Remote code execution vulnerability still not acknowledged by #Fortinet after 10+ days' exploitation. This is despite Fortinet's “radical transparency” agenda. In #SBBlogwatch, we roll our eyes. At @TechstrongGroup's @SecurityBlvd: https://securityboulevard.com/ ... $F…
-
@dinosn
Nicolas Krassas
on x
FortiGate admins report active exploitation 0-day. Vendor isn't talking. https://arstechnica.com/...
-
@s0ufi4n3
Soufiane
on x
A 0-day exploited in the wild impacting FortiManager that (allegedly) enables a remote unauthenticated attacker to execute arbitrary API commands on devices... Waiting the public disclosure ⏳ https://cyberplace.social/... [image]
-
@ryanaraine
Ryan Naraine
on x
Another day, another Fortinet 0day exploited in the wild https://www.securityweek.com/ ...
-
@uk_daniel_card
@uk_daniel_card
on x
Nice post from Kev on the FortiNet exploitation: (lovely logo too!). #FortiJump https://doublepulsar.com/...
-
r/fortinet
r
on reddit
Why was FortiManager 7.2.8 released? — Looking at the release notes: — No resolved issues have been reported for FortiManager version 7.2.8.
-
r/cybersecurity
r
on reddit
Fortinet warns of new critical FortiManager flaw used in zero-day attacks