Fortinet has released patches for CVE-2026-24858, an authentication bypass exploited in the wild to compromise devices.

A 9.8-severity flaw (CVE-2026-24061) in GNU InetUtils telnetd allows remote authentication bypass and root access in versions ...

SolarWinds fixed six Web Help Desk vulnerabilities, including four critical flaws that allow unauthenticated remote code ...

SolarWinds has patched critical Web Help Desk vulnerabilities leading to unauthenticated RCE or authentication bypass.

Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working to ...

To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...

A coordinated campaign has been observed targeting a recently disclosed critical-severity vulnerability that has been present ...

The 11-year-old vulnerability likely impacts many devices that are no longer supported — and presents easy exploit even for ...

The platform warns users of on-premises versions to upgrade to the latest versions; SaaS and web versions have been patched.

Update, Dec. 03, 2024: This story, originally published Dec. 02, now updated to reflect the 2FA-bypass security threat beyond Black Friday and Cyber Monday. The busiest period of online shopping, ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Update, Dec. 25, 2024: This story, originally published Dec.

Okta has addressed an authentication bypass bug that affects those with long usernames or employers with wordy domain names. The security hole could have allowed cybercriminals to pass Okta AD/LDAP ...