Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system. "An improper
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
TN

The Hacker News

2h ago
0 0

Discussion

Say something first

It all starts with you—share your thoughts now.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Fortinet warns of critical FortiMail flaw exploited in zero-day…

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execut…
Giulia

Giulia

6h ago
0
darkreading.com
Alleged KillSec Ransomware Mastermind a 16-Year-Old

Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years.
DR

Dark Reading

9h ago
0
thehackernews.com
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize R…

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organi…
JA

jordan af

9h ago
0
bleepingcomputer.com
Police dismantle KillSec ransomware gang allegedly led by 16-ye…

An international law enforcement operation dubbed "Operation KillSwitch" seized the KillSec ransomware gang's data leak site and servers, led to three arrests,…
Noor Bakker

Noor Bakker

15h ago
0
thehackernews.com
How Financial Services Companies Can Modernize Their Software S…

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engi…
MB

Maria Bakker

17h ago
0
darkreading.com
Warlock Ransomware Hits Large Spanish, Portuguese Orgs

A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.
DR

Dark Reading

17h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize R…

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organi…
JA

jordan af

9h ago
0
thehackernews.com
How Financial Services Companies Can Modernize Their Software S…

Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engi…
MB

Maria Bakker

17h ago
0
thehackernews.com
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth P…

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under…
TN

The Hacker News

2d ago
0
thehackernews.com
French Tax Data Theft Using Stolen Staff Passwords Went Undetec…

An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and Jul…
alex but tired

alex but tired

2d ago
0
thehackernews.com
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OA…

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a…
JA

jordan af

2d ago
0
thehackernews.com
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted …

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted att…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest