Fortinet Authentication Bypass Zero-Day Vulnerability Affected Versions and Patches Summary: On 1/14/2025, Fortigate published a critical vulnerability tracked as CVE-2024-55591 that affects FortiOS and FortiProxy. A successful exploitation of this vulnerability could allow a remote attacker to execute unauthorized commands and gain super-admin privileges. It is important to note that there have been reports of this being exploited in the wild. Affected Versions and solutions: Version Affected Solutions FortiOS 7.0 7.0.0 through 7.0.16 Upgrade......
Read More
ProxyNotShell: Zero-Day Vulnerabilities in Microsoft Exchange Server
Summary: Back at the start of August 2022, members of GTSC came across an attack where Microsoft Exchange was...
Read MoreFollina: Microsoft Office Zero Day Vulnerability
On 5/27/22 security research team, Nao_sec identified a malicious Word document in the wild, that appeared to be leveraging...
Read MoreMicrosoft Patches IE Zero-Day Dubbed “Double Kill”
Threat Summary On May 8th 2018 , Microsoft released critical security updates to patch a Remote Code Execution (RCE)...
Read More