Fortinet Fiasco: Sneaky Hackers Keep Clinging On Despite Patches!
Fortinet warns that cyber villains are using a sneaky trick to keep a foothold in FortiGate VPN devices even after updates. By exploiting old vulnerabilities, these digital mischief-makers leave behind symbolic links, maintaining read-only access to the root filesystem. Fortinet urges users to update FortiOS promptly to boot out these unwelcome guests.
Hot Take:
When it comes to cybersecurity, FortiGate devices have taken a page from the cockroach playbook—just when you think you’ve cleared them out, surprise! They’ve left a little parting gift in the form of symbolic links. Maybe it’s time we start patching with RAID rather than just updates!
Key Points:
- Fortinet warns of a post-exploitation technique maintaining read-only access to FortiGate VPN devices.
- Emails titled “Notification of device compromise” were sent to customers, urging immediate action.
- The technique exploits older vulnerabilities using symbolic links to maintain access.
- Attacks date back to early 2023, with numerous devices compromised.
- CERT-FR and CISA advise immediate updates and security checks.
Already a member? Log in here