Vulnerable Fortinet FortiOS System Expose VPN’s Credentials

Posted by & filed under Ειδοποιήσεις.

In a joint alert, CISA and the FBI note nation-state actors are scanning for FortiOS vulnerabilities tracked as CVE-2018-13379, CVE-2020-12812 and CVE-2019-5591 for initial attacks. The alert does not disclose details on the threat actors, but it says the agencies have detected a surge in scanning activities for the vulnerabilities since March. The agencies say the… Read more »

VMware fixes bug allowing attackers to steal admin credentials

Posted by & filed under Ειδοποιήσεις.

VMware has published security updates to address a high severity vulnerability in vRealize Operations that could allow attackers to steal admin credentials after exploiting vulnerable servers. vRealize Operations is an AI-powered and “self-driving” IT operations management for private, hybrid, and multi-cloud environments, available as an on-premises or SaaS solution. The vulnerability was discovered and reported to VMware by Positive… Read more »