Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours. CVE-2026-39813 (CVSS score: 9.1) refers to a path traversal vulnerability in FortiSandbox JRPC API that could
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
TN

The Hacker News

15d ago
1 0

Discussion

Break the silence

Take the opportunity to kick things off.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

thanakorn_boon477

Thanakorn Boon

Thanakorn BoonUpvoted 15d ago0 comments · 37 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Cry…

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages di…
Giulia

Giulia

19h ago
0
schneier.com
American Being Prosecuted for Wiping His Phone Before Handing I…

He’s being prosecuted for giving border officials a code that wiped his phone: The case centers on a feature included in GrapheneOS, a custom Android ope…
SS

Schneier on Security

20h ago
0
thehackernews.com
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Acce…

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, thi…
TN

The Hacker News

1d ago
0
darkreading.com
SE Asian Cybercriminal Syndicates Become a Global Power

The groups move from goods to services and continue to traffic people from at least 80 countries, costing nations in the region at least $88 billion in 2025 al…
DR

Dark Reading

1d ago
0
thehackernews.com
Critical Rails Flaw Could Let Unauthenticated Attackers Read Se…

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application ser…
TN

The Hacker News

1d ago
0
darkreading.com
OpenAI's Rogue Model Claims More Victims Beyond Hugging Face

OpenAI revealed rogue AI models compromised more services than initially disclosed, including a Modal customer environment and others.
DR

Dark Reading

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Cry…

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages di…
Giulia

Giulia

19h ago
0
thehackernews.com
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Acce…

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, thi…
TN

The Hacker News

1d ago
0
thehackernews.com
Critical Rails Flaw Could Let Unauthenticated Attackers Read Se…

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application ser…
TN

The Hacker News

1d ago
0
thehackernews.com
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and …

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex,…
TN

The Hacker News

1d ago
0
thehackernews.com
Flying Eagle Android RAT Traces Found on 170 Servers as Source …

Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt. io and independent resea…
TN

The Hacker News

2d ago
0
thehackernews.com
OpenAI Agent Used Exposed Credentials Across Four Services Duri…

OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face's production…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest