Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It
April advisory, October KEV. CVSS 6.0 authenticated CLI write/delete. Upgrade 7.6.5/7.4.10 trains, migrate dead ones, due Oct 19.
News
Read Full News
Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp
Exploitation since October 7, hotfixes that actually close the door, KEV on October 14. Hunt MicrosoftEdgeUpdateSvc and rebuild dirty boxes.
Fake WatchGuard VPN Site Steals Creds Then Hands You the Real Installer
No malware file. Just a browser form, a forced retry, and WatchGuard’s own signed client from the CDN. Endpoint tools see nothing. Your VPN gateway sees everything.
Kimsuky Is Sending Fake Resumes That End In Funhouse Ransomware
A Hangul resume drops Quasar RAT and ends in .Funhouse encryption. ASEC ties it to Kimsuky and earlier Endpoint ransomware cases.
Your Cheap Android Was Compromised Before You Turned It On
Midnight Mimosa ships in the firmware of cheap MediaTek Androids. You cannot uninstall it. Ad fraud and residential proxies are the business model.
Windows Just Let Booby-Trapped Files Skip the Download Warning
Mark of the Web is supposed to warn you before invoice.pdf.exe runs. CVE-2026-96951 lets crafted files skip that warning. October Patch Tuesday is mandatory.
Your MSP’s Backup Console Got Rooted and the Patch Does Nothing
AhsayCBS backup consoles are getting rooted by a no-creds exploit chain, and the version Ahsay shipped as the fix closes neither flaw. The call is coming from inside the MSP.