Threats Day: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Summary: This week's roundup covers a Fortinet patch release for critical and high-severity flaws in FortiOS, FortiManager, and FortiAnalyzer found through AI-assisted vulnerability discovery, with details withheld until November 10, 2026. Hudson Rock's FortiBleed 2.0 investigation identified 975 new domains and 40,573 exposed secrets, including 37,076 local-user records and 1,576 Active Directory LDAP bind records, drawn from 1,703 FortiGate source files tied to 1,689 host identifiers.
What's compelling: Fortinet devices are described as a favorite target, and the FortiBleed data alone covers 37,076 local-user records and 1,576 Active Directory LDAP bind records - credentials that sit behind the perimeter you are patching this week.
Read the original at The Hacker News ↗
- Topics
- Identity & Access Management
- Mentions
- CVE-2026-109618CVE-2026-109619
- Related
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity Cyber Risks ·Siemens Building Automation and Energy Products Cyber Risks · Nov 12, 2026Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026