⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

Summary: Fortinet patched a FortiWeb Web Application Firewall flaw, tracked as CVE-2025-64446 with a CVSS score of 9.1, that combines a path traversal flaw and an authentication bypass to allow any privileged action, and it has been exploited in the wild since early October 2025 to create malicious administrative accounts. CISA added the flaw to its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to apply fixes by November 21, 2025, and it is not currently known who is behind the exploitation activity.
What's compelling: Attackers have been creating administrative accounts on exposed FortiWeb appliances since early October 2025, and the identity of the actors is still unknown - so any administrative account you did not create yourself is worth hunting for now.

Read the original at The Hacker News ↗