⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Summary: Fortinet confirmed fresh exploitation of an incomplete patch for CVE-2025-59718 and CVE-2025-59719, an authentication bypass via crafted SAML messages that hit devices fully upgraded to the latest release when FortiCloud SSO was enabled. The same recap lists dozens of new CVEs across products including Cisco, GitLab, Zoom, Microsoft SQL Server, Google Chrome, Atlassian, Oracle and Apache Airflow.
What you should know: Attackers reached devices that were fully patched at the time of the attack, so an upgrade record is not evidence of safety for internet-facing edge devices with FortiCloud SSO enabled.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-12383 CVE-2025-13151 CVE-2025-13878 CVE-2025-13927 CVE-2025-13928 CVE-2025-14369 CVE-2025-14533 CVE-2025-23048 CVE-2025-33206 CVE-2025-47179 CVE-2025-4949 CVE-2025-49758 CVE-2025-49796 CVE-2025-54874 CVE-2025-54988 CVE-2025-59718 CVE-2025-59719 CVE-2025-60021 CVE-2025-61937 CVE-2025-61943 CVE-2025-64691 CVE-2025-65118 CVE-2025-65586 CVE-2025-66516 CVE-2025-67968 CVE-2025-68143 CVE-2025-68144 CVE-2025-68145 CVE-2025-68675 CVE-2026-0622 CVE-2026-0629 CVE-2026-0685 CVE-2026-0723 CVE-2026-0828 CVE-2026-0920 CVE-2026-1220 CVE-2026-1245 CVE-2026-20045 CVE-2026-21962 CVE-2026-22200 CVE-2026-22218 CVE-2026-22219 CVE-2026-22755 CVE-2026-22794 CVE-2026-22844 CVE-2026-23594 CVE-2026-23744 CVE-2026-23760 CVE-2026-24061
Related: Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws Cyber Risks ·
Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch Cyber Risks ·
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, Last Pass Fines, .NET RCE, OAuth Scams & More Cyber Risks ·