FortiGuard Labs

<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="title" property="title" content="FortiGuard Labs" /> <meta name="description" property="description" content="" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" property="twitter:card" content="summary" /> <meta name="twitter:title" property="twitter:title" content="FortiGuard Labs" /> <meta name="twitter:url" property="twitter:url" content="https://fortiguard.com/" /> <meta name="twitter:description" property="twitter:url" content="" /> <meta name="og:type" property="og:type" content="website" /> <meta name="og:site_name" property="og:site_name" content="FortiGuard Labs" /> <meta name="og:locale" property="og:locale" content="" /> <meta name="og:title" property="og:title" content="FortiGuard Labs" /> <meta name="og:url" property="og:url" content="https://fortiguard.com/" /> <meta name="og:description" property="og:description" content="" /> <meta name="og:image" property="og:image" content="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=32538" /> <meta name="twitter:image" property="twitter:image" content="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=32538" /> <link rel="shortcut icon" href="https://filestore.fortinet.com/fortiguard/static/images/favicon.ico?v=32538" type="image/x-icon" /> <title>FortiGuard Labs</title> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/bootstrap.min.css?v=32538"> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/vendor.min.css?v=32538"> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/style.min.css?v=32538"> <style> /* Hacks to deal with mm-slider and bootstrap colliding with eachother */ .mm-slideout { z-index: inherit; } .modal { color: #000; } /* End Hacks */ </style>  <script async src="https://www.googletagmanager.com/gtag/js?id=G-64GHK0036C"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-64GHK0036C'); </script> </head> <body ng-app="fgd" class="home dark-theme"> <header> <div class="ftnt-navigation d-none d-xl-block"> <div class="container-xxl"> <div class="top-toolbar"> <ul class="right-bar"> <li class="header-search-header" role="menuitem" aria-labelledby="search_field_header"> <img id="global_header_search_btn" src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=32538" alt="search"> <form action="/search" method="get" class="form-check d-none"> <span class="search_flat"> <label for="search_field_header" class="visually-hidden" id="label-search_field-header">Search</label> <input id="search_field_header" type="text" class="search_field" placeholder="Search FortiGuard" name="q" required="required" autocomplete="off" aria-labelledby="label-search_field-header" value="" /> <button type="submit" value=" " class="btn btn-sm" aria-label="Submit your search"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=32538" alt="search"> </button> <div class="global_search-popup"> <fieldset> <legend class="visually-hidden">Please select any available option</legend> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="all_home" class="form-check-input search-input-option" value="1" checked="checked" aria-checked="true" /> <label class="form-check-label search-input-label" for="all_home"> Normal </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="exact_home" class="form-check-input search-input-option" value="2" /> <label class="form-check-label search-input-label" for="exact_home"> Exact Match </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="cve_home" class="form-check-input search-input-option" value="3" /> <label class="form-check-label search-input-label" for="cve_home"> CVE </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="threat_home" class="form-check-input search-input-option" value="4" /> <label class="form-check-label search-input-label" for="threat_home"> ID </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="psirt_home" class="form-check-input search-input-option" value="6" /> <label class="form-check-label search-input-label" for="psirt_home"> PSIRT </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="repms_home" class="form-check-input search-input-option" value="8" /> <label class="form-check-label search-input-label" for="repms_home"> Antispam </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="outbreak-alert_home" class="form-check-input search-input-option" value="9" /> <label class="form-check-label search-input-label" for="outbreak-alert_home"> Outbreak Alert </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="url_home" class="form-check-input search-input-option" value="7" /> <label class="form-check-label search-input-label" for="url_home"> IP/Domain/URL </label> </div> </fieldset> </div> </span> </form> </li> </ul> </div> </div> </div> <div id="main-nav"> <nav class="desktop-nav d-none d-xl-block" aria-label="desktop navigation menu"> <div class="container-xxl"> <div class="row"> <div class="col-xl-3 col-lg-2 logo"> <a href="/"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=32538" alt="fortiguard-logo" loading="lazy"> </a> </div> <div class="col-xl-7 col-lg-8 ps-0"> <ul class="main-menu-bar" role="menu" ng-controller="MenuController"> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" aria-label="News / Research" class="main-menu" tabindex="0" id="heading-news-item">News / Research</a> <div class="header-hover md header-hover-news"> <div class="menu-panel dropdown-news"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 news-research-psirt pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">News/Research</h2> <h3 class="news-research" ng-click="isNews=true" ng-class="isNews?'active':''">Research Center</h3> <h3 class="news-psirt" ng-click="isNews=false" ng-class="isNews?'':'active'">PSIRT Center</h3> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-news-item"> <div class="row"> <div ng-hide="!isNews" class="col-md-5 research-center"> <div class="description text-start mb-3"> <span>Explore latest research and threat reports on emerging cyber threats.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/outbreak-alert" >Outbreak Alerts</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/blog/threat-research.html" target = _blank >Security Blog</a></li> <li class="border-start border-3"><a href="/threat-signal-report" >Threat Signal</a></li> </ul> </div> <div ng-hide="isNews" class="col-md-5 psirt-center"> <div class="description text-start mb-3"> <span>Fortinet Product Security Incident Response Team (PSIRT) updates.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/psirt" >Advisories</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/blog/psirt-blogs" target = _blank >PSIRT Blog</a></li> <li class="border-start border-3"><a href="/faq/psirt-contact" >PSIRT Contact</a></li> <li class="border-start border-3"><a href="/psirt_policy" >Security Vulnerability Policy</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-services-item">Services</a> <div class="header-hover lg header-hover-services"> <div class="menu-panel dropdown-services"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 services-category-wrapper pt-4 pe-0"> <h2 class="text-start">Services</h2> <h3 class="services-outbreak" ng-click="toggleServices('outbreak')" ng-class="services['outbreak']?'active':''">By Outbreak</h3> <h3 class="services-solution" ng-click="toggleServices('solution')" ng-class="services['solution']?'active':''">By Solution</h3> <h3 class="services-product" ng-click="toggleServices('product')" ng-class="services['product']?'active':''">By Product</h3> </div> <div class="col-xl-9 col-lg-10 ps-0"> <div ng-hide="!services['outbreak']" class="menu-overflow services-outbreak pt-4 ps-4"> <div role="region" aria-labelledby="heading-services-item"> <div class="row"> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Protect</h3> <div class="description text-start"><span> Counter measures across the security fabric for protecting assets, data and network. </span></div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="/services/botnet" >Anti-Botnet</a></li> <li class="border-start border-3"><a href="/services/arae" >Anti-Recon and Anti-Exploit</a></li> <li class="border-start border-3"><a href="/services/antispam" >AntiSpam</a></li> <li class="border-start border-3"><a href="/services/antivirus" >AntiVirus</a></li> <li class="border-start border-3"><a href="/services/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/services/fedr" >Endpoint Detection & Response</a></li> <li class="border-start border-3"><a href="/services/ev" >Endpoint Vulnerability</a></li> <li class="border-start border-3"><a href="/updates/casb" >Inline-CASB Application Definitions</a></li> <li class="border-start border-3"><a href="/services/ips" >Intrusion Protection</a></li> <li class="border-start border-3"><a href="/services/operational-technology-security-service" >Operational Technology Security</a></li> <li class="border-start border-3"><a href="/services/sandbox" >Sandbox Behavior Engine</a></li> <li class="border-start border-3"><a href="/services/ws" >Web Application Security</a></li> <li class="border-start border-3"><a href="/services/wf" >Web Filtering</a></li> </ul> </div> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Detect</h3> <div class="description text-start"> <span>Find and correlate important information to identify an outbreak.<span class="invisible">Find and correlate</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="/services/arae" >Anti-Recon and Anti-Exploit</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Threat Detection</a></li> <li class="border-start border-3"><a href="/services/ioc" >Indicators of Compromise</a></li> <li class="border-start border-3"><a href="/services/odcs" >Outbreak Deception</a></li> <li class="border-start border-3"><a href="/services/outbreak-detection-service" >Outbreak Detection</a></li> <li class="border-start border-3"><a href="/services/security-automation-service" >SOC Automation</a></li> </ul> </div> <div class="col"> <div class="row"> <div class="col-md-12 mb-2"><h3 class="mb-2 title text-uppercase border-3 border-start"> Respond</h3> <div class="description text-start"> <span>Develop containment techniques to mitigate impacts of security events.<span class="invisible">Develop containment</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortixdr" target = _blank >Endpoint Detection and Response</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/endpoint-security/forticlient#support-services" target = _blank >Endpoint Forensics</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/respond" target = _blank >Incident Response</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Recon: ACI</a></li> </ul> </div> <div class="col-md-12"> <h3 class="mb-2 mt-4 text-uppercase title border-3 border-start">Recover</h3> <div class="description text-start"> <span>Improve security posture and processes by implementing security awareness and training.</span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/assess" target = _blank >Assessment Services</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/training/cybersecurity-professionals" target = _blank >NSE Training</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/training/security-awareness-training" target = _blank >Security Awareness Training</a></li> </ul> </div> </div> </div> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Identify</h3> <div class="description text-start"> <span>Identify processes and assets that need protection.<span class="invisible">Identify processes and assets that</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Vulnerability</a></li> <li class="border-start border-3"><a href="/services/dynamic-application-security-testing" >Dynamic Application Security Testing</a></li> <li class="border-start border-3"><a href="/services/ev" >Endpoint Vulnerability</a></li> <li class="border-start border-3"><a href="/services/breach-attack-simulation" >FortiTester</a></li> <li class="border-start border-3"><a href="/services/dds" >IoT Detection</a></li> <li class="border-start border-3"><a href="/services/pentesting" >Pen Testing</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Recon: BP</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Recon: EASM</a></li> <li class="border-start border-3"><a href="/services/secr" >Security Rating</a></li> </ul> </div> </div> </div> </div> <div ng-hide="!services['solution']" class="menu-overflow services-solution pt-4 ps-4"> <div role="region" aria-labelledby="heading-services-item"> <div class="row"> <div class="col"> <ul> <li> <h3 class="text-uppercase">Network Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/network.svg?v=32538" alt="Network Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/botnet" >Anti-Botnet</a></li> <li class="border-start border-3"><a href="/services/arae" >Anti-Recon and Anti-Exploit</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Vulnerability and Threat Detection</a></li> <li class="border-start border-3"><a href="/services/dlp" >Data Loss Prevention</a></li> <li class="border-start border-3"><a href="/services/ioc" >Indicators of Compromise</a></li> <li class="border-start border-3"><a href="/updates/casb" >Inline-CASB Application Definitions</a></li> <li class="border-start border-3"><a href="/services/isdb" >Internet Services</a></li> <li class="border-start border-3"><a href="/services/ips" >Intrusion Protection</a></li> <li class="border-start border-3"><a href="/services/ipge" >IP Geolocation</a></li> <li class="border-start border-3"><a href="/services/sdns" >Secure DNS</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Endpoint Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/contentendpoint.svg?v=32538" alt="Endpoint Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/fortindr" >ANN and NDR</a></li> <li class="border-start border-3"><a href="/services/antivirus" >AntiVirus</a></li> <li class="border-start border-3"><a href="/services/fedr" >Endpoint Detection & Response</a></li> <li class="border-start border-3"><a href="/services/ev" >Endpoint Vulnerability</a></li> <li class="border-start border-3"><a href="/services/eoap" >FortiClient Outbreak Detection</a></li> <li class="border-start border-3"><a href="/services/dds" >IoT Detection</a></li> <li class="border-start border-3"><a href="/services/sandbox" >Sandbox Behavior Engine</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Application Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/application.svg?v=32538" alt="Application Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/antispam" >AntiSpam</a></li> <li class="border-start border-3"><a href="/services/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/services/fct-app" >Client Application Firewall</a></li> <li class="border-start border-3"><a href="/services/csd" >Credential Stuffing Defense</a></li> <li class="border-start border-3"><a href="/services/dynamic-application-security-testing" >Dynamic Application Security Testing</a></li> <li class="border-start border-3"><a href="/services/operational-technology-security-service" >Operational Technology Security</a></li> <li class="border-start border-3"><a href="/services/ws" >Web Application Security</a></li> <li class="border-start border-3"><a href="/services/wf" >Web Filtering</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Security Operations</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/response.svg?v=32538" alt="Security Operations icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/breach-attack-simulation" >Breach Attack Simulation</a></li> <li class="border-start border-3"><a href="/services/fortidevsec" >FortiDevSec</a></li> <li class="border-start border-3"><a href="/services/fortisiem" >FortiSIEM Outbreak Detection Service</a></li> <li class="border-start border-3"><a href="/services/odcs" >Outbreak Deception</a></li> <li class="border-start border-3"><a href="/services/outbreak-detection-service" >Outbreak Detection</a></li> <li class="border-start border-3"><a href="/services/pentesting" >Pen Testing</a></li> <li class="border-start border-3"><a href="/services/secr" >Security Rating</a></li> </ul> </div> </div> </div> </div> <div ng-hide="!services['product']" class="menu-overflow services-product-wrapper"> <div class="row h-100"> <div class="col-4 products pe-0"> <ul> <li ng-click="currentProduct='0'" ng-class="{'active-product':currentProduct==='0'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortigate.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiGate</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='1'" ng-class="{'active-product':currentProduct==='1'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortianalyzer.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiAnalyzer</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='2'" ng-class="{'active-product':currentProduct==='2'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/forticlient.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiClient</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='3'" ng-class="{'active-product':currentProduct==='3'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiweb.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiWeb</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='4'" ng-class="{'active-product':currentProduct==='4'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fadc.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiADC</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='5'" ng-class="{'active-product':currentProduct==='5'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiauthenticator.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiAuthenticator</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='6'" ng-class="{'active-product':currentProduct==='6'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/cnp.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiCNP</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='7'" ng-class="{'active-product':currentProduct==='7'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiddos.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiDDoS</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='8'" ng-class="{'active-product':currentProduct==='8'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortideceptor.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiDeceptor</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='9'" ng-class="{'active-product':currentProduct==='9'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fedr.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiEDR</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='10'" ng-class="{'active-product':currentProduct==='10'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortimail.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiMail</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li class="invisible">empty</li> </ul> </div> <div class="col-4 products pe-0 ps-0"> <ul> <li ng-click="currentProduct='11'" ng-class="{'active-product':currentProduct==='11'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortindr.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiNDR</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='12'" ng-class="{'active-product':currentProduct==='12'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortipam.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiPAM</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='13'" ng-class="{'active-product':currentProduct==='13'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortipolicy.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiPolicy</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='14'" ng-class="{'active-product':currentProduct==='14'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiproxy.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiProxy</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='15'" ng-class="{'active-product':currentProduct==='15'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortirecon.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiRecon</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='16'" ng-class="{'active-product':currentProduct==='16'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/sandbox.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiSandBox</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='17'" ng-class="{'active-product':currentProduct==='17'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisase.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiSASE</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='18'" ng-class="{'active-product':currentProduct==='18'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisiem.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiSIEM</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='19'" ng-class="{'active-product':currentProduct==='19'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortitester.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiTester</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='20'" ng-class="{'active-product':currentProduct==='20'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortidast.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiDAST</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='21'" ng-class="{'active-product':currentProduct==='21'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/cnpvuln.svg?v=32538" alt=""/> <p class="mb-0 me-3">FortiCNAPP</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=32538" alt="" class="order-0 ms-auto me-0"/></li> <li class="invisible">empty</li> </ul> </div> <div class="col-4 services"> <ul ng-hide="currentProduct!=='0'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/updates/casb">Inline-CASB Application Definitions</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/dds">IoT Detection</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/operational-technology-security-service">Operational Technology Security</a> </li> <li class="mb-0"><a href="/services/sdns">Secure DNS</a> </li> <li class="mb-0"><a href="/services/secr">Security Rating</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='1'" class="services-list"> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/outbreak-detection-service">Outbreak Detection</a> </li> <li class="mb-0"><a href="/services/security-automation-service">SOC Automation</a> </li> </ul> <ul ng-hide="currentProduct!=='2'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/arae">Anti-Recon and Anti-Exploit</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/fct-app">Application Firewall</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/eoap">Outbreak Detection</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='3'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/updates/webshell">Fuzzy Webshell</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/ws">Web Application Security</a> </li> </ul> <ul ng-hide="currentProduct!=='4'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/ws">Web Application Security</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='5'" class="services-list"> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> </ul> <ul ng-hide="currentProduct!=='6'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Vulnerability</a> </li> </ul> <ul ng-hide="currentProduct!=='7'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> </ul> <ul ng-hide="currentProduct!=='8'" class="services-list"> <li class="mb-0"><a href="/services/arae">Anti-Recon and Anti-Exploit</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/odcs">Outbreak Deception</a> </li> </ul> <ul ng-hide="currentProduct!=='9'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/fedr">EndPoint Detection and Response</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='10'" class="services-list"> <li class="mb-0"><a href="/services/antispam">AntiSpam</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='11'" class="services-list"> <li class="mb-0"><a href="/services/fortindr">Network Detection and Response</a> </li> </ul> <ul ng-hide="currentProduct!=='12'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> </ul> <ul ng-hide="currentProduct!=='13'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> </ul> <ul ng-hide="currentProduct!=='14'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/operational-technology-security-service">Industrial Security</a> </li> </ul> <ul ng-hide="currentProduct!=='15'" class="services-list"> <li class="mb-0"><a href="https://www.fortinet.com/products/fortirecon">Digital Risk Protection</a> </li> </ul> <ul ng-hide="currentProduct!=='16'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='17'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/sdns">Secure DNS</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='18'" class="services-list"> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/fortisiem">Outbreak Detection</a> </li> </ul> <ul ng-hide="currentProduct!=='19'" class="services-list"> <li class="mb-0"><a href="/services/breach-attack-simulation">Breach Attack Simulation</a> </li> </ul> <ul ng-hide="currentProduct!=='20'" class="services-list"> <li class="mb-0"><a href="/services/dynamic-application-security-testing">Dynamic Application Security Testing</a> </li> </ul> <ul ng-hide="currentProduct!=='21'" class="services-list"> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Cloud Threat Detection</a> </li> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Cloud Vulnerability</a> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-threats-item">Threat Intelligence</a> <div class="header-hover sm single header-hover-threats"> <div class="menu-panel dropdown-threats"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Threat Intelligence<br> Center</h2> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-threats-item"> <div class="row"> <div class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span> Browse the FortiGuard Labs extensive encyclopedia and Threat Analytics. </span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/threat-research" >Threat Analytics</a></li> <li class="border-start border-3"><a href="/encyclopedia" >Threat Encyclopedia</a></li> <li class="border-start border-3"><a href="/threat-map" >Threat Map</a></li> <li class="border-start border-3"><a href="/webfilter" >Web Filtering</a></li> </ul> </div> </div> <div class="col-md-6"></div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-resources-item">Resources</a> <div class="header-hover md header-hover-resources"> <div class="menu-panel dropdown-resources"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Resource Center</h2> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4"> <div class="row"> <div class="col-md-5 position-relative" role="region" aria-labelledby="heading-resources-item"> <div class="description text-start mb-3"> <span> Learn about service status, publications and other available resources. </span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/sample-files" >FortiGuard Sample Files</a></li> <li class="border-start border-3"><a href="/mitre-mapping" >MITRE ATT&CK Matrix</a></li> <li class="border-start border-3"><a href="/nist-csf" >NIST Cybersecurity Framework</a></li> <li class="border-start border-3"><a href="/events" >Publications</a></li> <li class="border-start border-3"><a href="/security-best-practices" >Security Best Practices</a></li> </ul> </div> <div class="col-md-5"></div> </div> </div> </div> </div> </div> </div> </li> <li class="menu-last" role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-about-item">About</a> <div class="header-hover sm single header-hover-about"> <div class="menu-panel dropdown-aboutus"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">About</h2> <h3 ng-click="isAboutUs=true" class="aboutus-fortiguard" ng-class="isAboutUs?'active':''">FortiGuard Labs</h3> <h3 ng-click="isAboutUs=false" class="aboutus-partners" ng-class="isAboutUs?'':'active'">Partners</h3> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-news-item"> <div class="row"> <div ng-hide="!isAboutUs" class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span>AI-Powered Threat Intelligence for an Evolving Digital World.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/contactus" >Contact Us</a></li> <li class="border-start border-3"><a href="/premium-services" >Premium Services</a></li> <li class="border-start border-3"><a href="/rss-feeds" >RSS Feeds</a></li> </ul> </div> <div ng-hide="isAboutUs" class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span>Leveraging cyber security industry partner relationships.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/cta" >Cyber Threat Alliance</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/corporate/about-us/product-certifications/mitre-att-ck" target = _blank >MITRE Engenuity</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </li> </ul> </div> <div class="col-xl-2 col-lg-3"> <ul class="float-end"> <li class="fortinet-item"> <a href="https://www.fortinet.com" target="_blank"> </a> </li> </ul> </div> </div> </div> </nav> <nav class="navbar navbar-expand-xl navbar-light d-block d-xl-none mobile-nav" aria-label="mobile navigation menu"> <div class="container-fluid p-0"> <button class="navbar-toggler ms-3 collapsed" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNavDropdownMain" aria-controls="navbarNavDropdownMain" aria-expanded="false" aria-label="Toggle navigation"> <span></span> <span></span> <span></span> </button> <a class="navbar-brand" href="/"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=32538" alt="fortiguard-logo" loading="lazy"> </a> <img id="mobile_global_header_search_btn" src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=32538" alt="search" class="me-3" width="25px"> <div class="collapse navbar-collapse" id="navbarNavDropdownMain"><ul class="navbar-nav"> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownNews" role="button" data-bs-toggle="dropdown" aria-expanded="false"> News / Research</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownNews"> <li class=""><a href="/psirt" class=dropdown-item>Advisories</a></li> <li class=""><a href="/outbreak-alert" class=dropdown-item>Outbreak Alerts</a></li> <li class=""><a href="https://www.fortinet.com/blog/psirt-blogs" target = _blank class=dropdown-item>PSIRT Blog</a></li> <li class=""><a href="/faq/psirt-contact" class=dropdown-item>PSIRT Contact</a></li> <li class=""><a href="https://www.fortinet.com/blog/threat-research.html" target = _blank class=dropdown-item>Security Blog</a></li> <li class=""><a href="/psirt_policy" class=dropdown-item>Security Vulnerability Policy</a></li> <li class=""><a href="/threat-signal-report" class=dropdown-item>Threat Signal</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownServices" role="button" data-bs-toggle="dropdown" aria-expanded="false">Services</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownServices"> <li class=""><a href="/services/botnet" class=dropdown-item>Anti-Botnet</a></li> <li class=""><a href="/services/arae" class=dropdown-item>Anti-Recon and Anti-Exploit</a></li> <li class=""><a href="/services/arae" class=dropdown-item>Anti-Recon and Anti-Exploit</a></li> <li class=""><a href="/services/antispam" class=dropdown-item>AntiSpam</a></li> <li class=""><a href="/services/antivirus" class=dropdown-item>AntiVirus</a></li> <li class=""><a href="/services/appcontrol" class=dropdown-item>Application Control</a></li> <li class=""><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/assess" target = _blank class=dropdown-item>Assessment Services</a></li> <li class=""><a href="/services/cloud-vulnerability-and-threat-detection" class=dropdown-item>Cloud Threat Detection</a></li> <li class=""><a href="/services/cloud-vulnerability-and-threat-detection" class=dropdown-item>Cloud Vulnerability</a></li> <li class=""><a href="/services/dynamic-application-security-testing" class=dropdown-item>Dynamic Application Security Testing</a></li> <li class=""><a href="/services/fedr" class=dropdown-item>Endpoint Detection & Response</a></li> <li class=""><a href="https://www.fortinet.com/products/fortixdr" target = _blank class=dropdown-item>Endpoint Detection and Response</a></li> <li class=""><a href="https://www.fortinet.com/products/endpoint-security/forticlient#support-services" target = _blank class=dropdown-item>Endpoint Forensics</a></li> <li class=""><a href="/services/ev" class=dropdown-item>Endpoint Vulnerability</a></li> <li class=""><a href="/services/ev" class=dropdown-item>Endpoint Vulnerability</a></li> <li class=""><a href="/services/breach-attack-simulation" class=dropdown-item>FortiTester</a></li> <li class=""><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/respond" target = _blank class=dropdown-item>Incident Response</a></li> <li class=""><a href="/services/ioc" class=dropdown-item>Indicators of Compromise</a></li> <li class=""><a href="/updates/casb" class=dropdown-item>Inline-CASB Application Definitions</a></li> <li class=""><a href="/services/ips" class=dropdown-item>Intrusion Protection</a></li> <li class=""><a href="/services/dds" class=dropdown-item>IoT Detection</a></li> <li class=""><a href="https://www.fortinet.com/training/cybersecurity-professionals" target = _blank class=dropdown-item>NSE Training</a></li> <li class=""><a href="/services/operational-technology-security-service" class=dropdown-item>Operational Technology Security</a></li> <li class=""><a href="/services/odcs" class=dropdown-item>Outbreak Deception</a></li> <li class=""><a href="/services/outbreak-detection-service" class=dropdown-item>Outbreak Detection</a></li> <li class=""><a href="/services/pentesting" class=dropdown-item>Pen Testing</a></li> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Recon: ACI</a></li> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Recon: BP</a></li> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Recon: EASM</a></li> <li class=""><a href="/services/sandbox" class=dropdown-item>Sandbox Behavior Engine</a></li> <li class=""><a href="https://www.fortinet.com/training/security-awareness-training" target = _blank class=dropdown-item>Security Awareness Training</a></li> <li class=""><a href="/services/secr" class=dropdown-item>Security Rating</a></li> <li class=""><a href="/services/security-automation-service" class=dropdown-item>SOC Automation</a></li> <li class=""><a href="/services/ws" class=dropdown-item>Web Application Security</a></li> <li class=""><a href="/services/wf" class=dropdown-item>Web Filtering</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownThreatLookup" role="button" data-bs-toggle="dropdown" aria-expanded="false">Threat Lookup</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownThreatLookup"> <li class=""><a href="/appcontrol" class=dropdown-item>Application Control</a></li> <li class=""><a href="/threat-research" class=dropdown-item>Threat Analytics</a></li> <li class=""><a href="/encyclopedia" class=dropdown-item>Threat Encyclopedia</a></li> <li class=""><a href="/threat-map" class=dropdown-item>Threat Map</a></li> <li class=""><a href="/webfilter" class=dropdown-item>Web Filtering</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownResources" role="button" data-bs-toggle="dropdown" aria-expanded="false">Resources</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownResources"> <li class=""><a href="/sample-files" class=dropdown-item>FortiGuard Sample Files</a></li> <li class=""><a href="/mitre-mapping" class=dropdown-item>MITRE ATT&CK Matrix</a></li> <li class=""><a href="/nist-csf" class=dropdown-item>NIST Cybersecurity Framework</a></li> <li class=""><a href="/events" class=dropdown-item>Publications</a></li> <li class=""><a href="/security-best-practices" class=dropdown-item>Security Best Practices</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownAbout" role="button" data-bs-toggle="dropdown" aria-expanded="false">About</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownAbout"> <li class=""><a href="/contactus" class=dropdown-item>Contact Us</a></li> <li class=""><a href="/cta" class=dropdown-item>Cyber Threat Alliance</a></li> <li class=""><a href="https://www.fortinet.com/corporate/about-us/product-certifications/mitre-att-ck" target = _blank class=dropdown-item>MITRE Engenuity</a></li> <li class=""><a href="/premium-services" class=dropdown-item>Premium Services</a></li> <li class=""><a href="/rss-feeds" class=dropdown-item>RSS Feeds</a></li> </ul> </li> </li> <li class="nav-item"><a href="https://fortinet.com">FORTINET</a></li> </ul></div> </div> </nav> <div class="mobile-search-bar d-xl-none d-none"> <form action="/search" method="get" class="mobile-search-form col-12 "> <div class="input-group"> <select class="form-select" name="engine" > <option value="1" > Normal </option> <option value="2" > Exact Match </option> <option value="3" > CVE </option> <option value="4" > ID </option> <option value="6" > PSIRT </option> <option value="8" > Antispam </option> <option value="9" > Outbreak Alert </option> <option value="7" > IP/Domain/URL </option> </select> <input id="search_field_header" type="text" class="form-control" placeholder="Search FortiGuard" name="q" required="required" autocomplete="off" aria-labelledby="label-search_field-header" value="" /> <button class="btn btn-sm btn-outline-secondary" type="submit"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=32538" alt="search"> </button> </div> </form> </div> </div> </header><main> <div class="page-content"> <div class="page-section "> <h1 class="visually-hidden">Fortiguard Labs</h1> <div id="homepage_slidershow" class="react_homepage_slidershow"></div> <div class="latest-news-section"> <div class="container-xxl"> <h2>Latest News</h2> <div class="ftnt-slider d-none d-xxl-block"> <div class="row ftnt-slider-row"> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/pan-os-management-interface-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/45.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Networks Management Interface Attack</h5> <span>Nov 21, 2024</span> <p class="card-text mb-0">Palo Alto Networks has recently disclosed two zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, affecting the PAN-OS firewall and other products. Both flaws, which are actively being...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/kemp-loadmaster-os-command-injection'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/44.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Progress Kemp LoadMaster OS Command Injection Vulnerability</h5> <span>Nov 20, 2024</span> <p class="card-text mb-0">FortiGuard network sensors detect attack attempts targeting the Progress Kemp LoadMaster. Successful exploitation of the CVE-2024-1212 vulnerability allows unauthenticated remote attackers to...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5593/microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/43.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability</h5> <span>Nov 15, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Microsoft Windows contains an NTLMv2 hash spoofing vulnerability (CVE-2024-43451) that could result in disclosing a user's NTLMv2 hash to an attacker via a file open...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/palo-alto-expedition-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/42.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Expedition Missing Authentication Vulnerability</h5> <span>Nov 14, 2024</span> <p class="card-text mb-0">FortiGuard sensors continue to detect and block attack attempts targeting the Palo Alto Expedition vulnerability (CVE-2024-5910). Successful exploitation, this vulnerability could allow attackers...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5574/cisco-urwb-access-point-command-injection-vulnerability-cve-2024-20418'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/24.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Cisco URWB Access Point Command Injection Vulnerability (CVE-2024-20418)</h5> <span>Nov 07, 2024</span> <p class="card-text mb-0">What is the Vulnerability?A maximum severity security (CVS Score 10.0) vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/mallox-ransomware'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/23.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Mallox Ransomware</h5> <span>Oct 03, 2024</span> <p class="card-text mb-0">FortiGuard Labs continue to see increase in Mallox ransomware related activities detecting Mallox ransomware on multiple hundred FortiGuard sensors. Ransomware infection may cause disruption,...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5563/metabase-information-disclosure-vulnerability-cve-2021-41277'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/13.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Metabase Information Disclosure Vulnerability (CVE-2021-41277)</h5> <span>Oct 21, 2024</span> <p class="card-text mb-0">What is the attack?FortiGuard Labs observes widespread attack attempts targeting a three-year-old Metabase vulnerability (CVE-2021-41277) detected by more than 30,000 sensors. Successful...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5559/veeam-backup-and-replication-deserialization-vulnerability-cve-2024-40711'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/9.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Veeam Backup and Replication Deserialization Vulnerability (CVE-2024-40711)</h5> <span>Oct 17, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-40711 is a critical unauthenticated Remote Code Execution (RCE) vulnerability in Veeam Backup & Replication software. Threat actors could execute arbitrary code...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/jenkins-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/10.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Jenkins RCE Attack</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Cyber threat actors target Jenkins Arbitrary File Read vulnerability (CVE-2024-23897) in ransomware attacks. FortiGuard Labs continues to see active attack telemetry targeting the vulnerability.</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/zimbra-collaboration-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/8.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Synacor Zimbra Collaboration Command Execution Vulnerability</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Threat Actors are exploiting a recently fixed RCE vulnerability in Zimbra email servers, which can be exploited just by sending specially crafted emails to the SMTP server.</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5556/ivanti-csa-cloud-services-appliance-zero-day-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/6.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti CSA (Cloud Services Appliance) zero-day Attack</h5> <span>Oct 08, 2024</span> <p class="card-text mb-0">What is the Attack?Attackers are actively exploiting multiple zero-day vulnerabilities affecting Ivanti CSA (Cloud Services Appliance) that could lead an attacker to gain admin access, bypass...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/events/5552'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/2.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/events.svg?v=32538" width="20" alt="events-logo"/> <span>Publications</span> </p> <h5 class="card-title">[Virus Bulletin 2024] Android Flutter Malware</h5> <span>Oct 02, 2024</span> <p class="card-text mb-0">This talk explains how to use Blutter to analyze malicious Android samples such as Android/Fluhorse and Android/SpyLoan.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5551/ivanti-virtual-traffic-manager-vtm-authentication-bypass-vulnerability-cve-2024-7593'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/1.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Virtual Traffic Manager (vTM ) Authentication Bypass Vulnerability (CVE-2024-7593)</h5> <span>Sep 26, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Ivanti Virtual Traffic Manager (vTM), a software application used to manage and optimize the delivery of applications across networks is affected by an authentication...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5550/apache-hugegraph-server-improper-access-control-vulnerability-cve-2024-27348'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/0.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Apache HugeGraph-Server Improper Access Control Vulnerability (CVE-2024-27348)</h5> <span>Sep 25, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-27348 is a remote code execution (RCE) vulnerability affecting Apache HugeGraph-Server. HugeGraph is a versatile graph database that integrates seamlessly with...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/geoserver-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/32.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">GeoServer RCE Attack</h5> <span>Sep 23, 2024</span> <p class="card-text mb-0">A remote code execution vulnerability affecting GeoServer is under active exploitation, with recent attack attempts observed on 40,000+ FortiGuard sensors. This vulnerability (CVE-2024-36401) is...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5523/ivanti-cloud-services-appliance-csa-os-command-injection-vulnerability-cve-2024-8190'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/25.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-8190)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Vulnerability?An OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) version 4.6 allows an authenticated attacker to remotely execute code. The attacker must...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5524/raisecom-gateway-command-injection-cve-2024-7120'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/26.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Raisecom Gateway Command Injection (CVE-2024-7120)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Attack?FortiGuard Labs observes attack attempts targeting certain models of Raisecom Gateway that are vulnerable to CVE-2024-7120. This attack can be initiated remotely and may lead to...</p> </div> </div> </div> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/russian-cyber-espionage'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/12.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Russian Cyber Espionage Attack</h5> <span>Sep 09, 2024</span> <p class="card-text mb-0">FortiGuard Labs continues to observe attack attempts exploiting the vulnerabilities highlighted in the recent CISA advisory about Russian military cyber actors. These actors are targeting U.S. and...</p> </div> </div> </div> </div> </div> </div> <div class="ftnt-arrow-resources" id="fgl-blog"> <button class="ftnt-slide-prev" style="opacity: 0.4; cursor: pointer;" aria-label="Previous" disabled=""></button> <input type="range" min="1" max="100" value="0" class="ftnt-progress" id="resources-progressbar" aria-label="resources progress bar" disabled="" style="opacity: 1;"> <button class="ftnt-slide-next" style="float: right; opacity: 1; cursor: pointer;" aria-label="Next"></button> </div> </div> <div class="ftnt-slider d-none d-md-block d-xxl-none"> <div class="row ftnt-slider-row"> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/pan-os-management-interface-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/45.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Networks Management Interface Attack</h5> <span>Nov 21, 2024</span> <p class="card-text mb-0">Palo Alto Networks has recently disclosed two zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, affecting the PAN-OS firewall and other products. Both flaws, which are actively being...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/kemp-loadmaster-os-command-injection'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/44.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Progress Kemp LoadMaster OS Command Injection Vulnerability</h5> <span>Nov 20, 2024</span> <p class="card-text mb-0">FortiGuard network sensors detect attack attempts targeting the Progress Kemp LoadMaster. Successful exploitation of the CVE-2024-1212 vulnerability allows unauthenticated remote attackers to...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5593/microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/43.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability</h5> <span>Nov 15, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Microsoft Windows contains an NTLMv2 hash spoofing vulnerability (CVE-2024-43451) that could result in disclosing a user's NTLMv2 hash to an attacker via a file open...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/palo-alto-expedition-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/42.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Expedition Missing Authentication Vulnerability</h5> <span>Nov 14, 2024</span> <p class="card-text mb-0">FortiGuard sensors continue to detect and block attack attempts targeting the Palo Alto Expedition vulnerability (CVE-2024-5910). Successful exploitation, this vulnerability could allow attackers...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5574/cisco-urwb-access-point-command-injection-vulnerability-cve-2024-20418'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/24.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Cisco URWB Access Point Command Injection Vulnerability (CVE-2024-20418)</h5> <span>Nov 07, 2024</span> <p class="card-text mb-0">What is the Vulnerability?A maximum severity security (CVS Score 10.0) vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/mallox-ransomware'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/23.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Mallox Ransomware</h5> <span>Oct 03, 2024</span> <p class="card-text mb-0">FortiGuard Labs continue to see increase in Mallox ransomware related activities detecting Mallox ransomware on multiple hundred FortiGuard sensors. Ransomware infection may cause disruption,...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5563/metabase-information-disclosure-vulnerability-cve-2021-41277'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/13.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Metabase Information Disclosure Vulnerability (CVE-2021-41277)</h5> <span>Oct 21, 2024</span> <p class="card-text mb-0">What is the attack?FortiGuard Labs observes widespread attack attempts targeting a three-year-old Metabase vulnerability (CVE-2021-41277) detected by more than 30,000 sensors. Successful...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5559/veeam-backup-and-replication-deserialization-vulnerability-cve-2024-40711'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/9.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Veeam Backup and Replication Deserialization Vulnerability (CVE-2024-40711)</h5> <span>Oct 17, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-40711 is a critical unauthenticated Remote Code Execution (RCE) vulnerability in Veeam Backup & Replication software. Threat actors could execute arbitrary code...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/jenkins-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/10.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Jenkins RCE Attack</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Cyber threat actors target Jenkins Arbitrary File Read vulnerability (CVE-2024-23897) in ransomware attacks. FortiGuard Labs continues to see active attack telemetry targeting the vulnerability.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/zimbra-collaboration-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/8.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Synacor Zimbra Collaboration Command Execution Vulnerability</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Threat Actors are exploiting a recently fixed RCE vulnerability in Zimbra email servers, which can be exploited just by sending specially crafted emails to the SMTP server.</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5556/ivanti-csa-cloud-services-appliance-zero-day-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/6.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti CSA (Cloud Services Appliance) zero-day Attack</h5> <span>Oct 08, 2024</span> <p class="card-text mb-0">What is the Attack?Attackers are actively exploiting multiple zero-day vulnerabilities affecting Ivanti CSA (Cloud Services Appliance) that could lead an attacker to gain admin access, bypass...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/events/5552'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/2.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/events.svg?v=32538" width="20" alt="events-logo"/> <span>Publications</span> </p> <h5 class="card-title">[Virus Bulletin 2024] Android Flutter Malware</h5> <span>Oct 02, 2024</span> <p class="card-text mb-0">This talk explains how to use Blutter to analyze malicious Android samples such as Android/Fluhorse and Android/SpyLoan.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5551/ivanti-virtual-traffic-manager-vtm-authentication-bypass-vulnerability-cve-2024-7593'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/1.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Virtual Traffic Manager (vTM ) Authentication Bypass Vulnerability (CVE-2024-7593)</h5> <span>Sep 26, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Ivanti Virtual Traffic Manager (vTM), a software application used to manage and optimize the delivery of applications across networks is affected by an authentication...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5550/apache-hugegraph-server-improper-access-control-vulnerability-cve-2024-27348'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/0.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Apache HugeGraph-Server Improper Access Control Vulnerability (CVE-2024-27348)</h5> <span>Sep 25, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-27348 is a remote code execution (RCE) vulnerability affecting Apache HugeGraph-Server. HugeGraph is a versatile graph database that integrates seamlessly with...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/geoserver-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/32.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">GeoServer RCE Attack</h5> <span>Sep 23, 2024</span> <p class="card-text mb-0">A remote code execution vulnerability affecting GeoServer is under active exploitation, with recent attack attempts observed on 40,000+ FortiGuard sensors. This vulnerability (CVE-2024-36401) is...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5523/ivanti-cloud-services-appliance-csa-os-command-injection-vulnerability-cve-2024-8190'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/25.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-8190)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Vulnerability?An OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) version 4.6 allows an authenticated attacker to remotely execute code. The attacker must...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5524/raisecom-gateway-command-injection-cve-2024-7120'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/26.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Raisecom Gateway Command Injection (CVE-2024-7120)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Attack?FortiGuard Labs observes attack attempts targeting certain models of Raisecom Gateway that are vulnerable to CVE-2024-7120. This attack can be initiated remotely and may lead to...</p> </div> </div> </div> <div class="col-md-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/russian-cyber-espionage'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/12.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Russian Cyber Espionage Attack</h5> <span>Sep 09, 2024</span> <p class="card-text mb-0">FortiGuard Labs continues to observe attack attempts exploiting the vulnerabilities highlighted in the recent CISA advisory about Russian military cyber actors. These actors are targeting U.S. and...</p> </div> </div> </div> </div> </div> </div> <div class="ftnt-arrow-resources" id="fgl-blog"> <button class="ftnt-slide-prev" style="opacity: 0.4; cursor: pointer;" aria-label="Previous" disabled=""></button> <input type="range" min="1" max="100" value="0" class="ftnt-progress" id="resources-progressbar" aria-label="resources progress bar" disabled="" style="opacity: 1;"> <button class="ftnt-slide-next" style="float: right; opacity: 1; cursor: pointer;" aria-label="Next"></button> </div> </div> <div class="ftnt-slider d-block d-xxl-none d-lg-none d-md-none"> <div class="row ftnt-slider-row"> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/pan-os-management-interface-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/45.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Networks Management Interface Attack</h5> <span>Nov 21, 2024</span> <p class="card-text mb-0">Palo Alto Networks has recently disclosed two zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, affecting the PAN-OS firewall and other products. Both flaws, which are actively being...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/kemp-loadmaster-os-command-injection'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/44.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Progress Kemp LoadMaster OS Command Injection Vulnerability</h5> <span>Nov 20, 2024</span> <p class="card-text mb-0">FortiGuard network sensors detect attack attempts targeting the Progress Kemp LoadMaster. Successful exploitation of the CVE-2024-1212 vulnerability allows unauthenticated remote attackers to...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5593/microsoft-windows-ntlmv2-hash-disclosure-spoofing-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/43.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability</h5> <span>Nov 15, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Microsoft Windows contains an NTLMv2 hash spoofing vulnerability (CVE-2024-43451) that could result in disclosing a user's NTLMv2 hash to an attacker via a file open...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/palo-alto-expedition-vulnerability'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/42.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Palo Alto Expedition Missing Authentication Vulnerability</h5> <span>Nov 14, 2024</span> <p class="card-text mb-0">FortiGuard sensors continue to detect and block attack attempts targeting the Palo Alto Expedition vulnerability (CVE-2024-5910). Successful exploitation, this vulnerability could allow attackers...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5574/cisco-urwb-access-point-command-injection-vulnerability-cve-2024-20418'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/24.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Cisco URWB Access Point Command Injection Vulnerability (CVE-2024-20418)</h5> <span>Nov 07, 2024</span> <p class="card-text mb-0">What is the Vulnerability?A maximum severity security (CVS Score 10.0) vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/mallox-ransomware'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/23.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Mallox Ransomware</h5> <span>Oct 03, 2024</span> <p class="card-text mb-0">FortiGuard Labs continue to see increase in Mallox ransomware related activities detecting Mallox ransomware on multiple hundred FortiGuard sensors. Ransomware infection may cause disruption,...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5563/metabase-information-disclosure-vulnerability-cve-2021-41277'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/13.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Metabase Information Disclosure Vulnerability (CVE-2021-41277)</h5> <span>Oct 21, 2024</span> <p class="card-text mb-0">What is the attack?FortiGuard Labs observes widespread attack attempts targeting a three-year-old Metabase vulnerability (CVE-2021-41277) detected by more than 30,000 sensors. Successful...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5559/veeam-backup-and-replication-deserialization-vulnerability-cve-2024-40711'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/9.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Veeam Backup and Replication Deserialization Vulnerability (CVE-2024-40711)</h5> <span>Oct 17, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-40711 is a critical unauthenticated Remote Code Execution (RCE) vulnerability in Veeam Backup & Replication software. Threat actors could execute arbitrary code...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/jenkins-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/10.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Jenkins RCE Attack</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Cyber threat actors target Jenkins Arbitrary File Read vulnerability (CVE-2024-23897) in ransomware attacks. FortiGuard Labs continues to see active attack telemetry targeting the vulnerability.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/zimbra-collaboration-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/8.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Synacor Zimbra Collaboration Command Execution Vulnerability</h5> <span>Oct 09, 2024</span> <p class="card-text mb-0">Threat Actors are exploiting a recently fixed RCE vulnerability in Zimbra email servers, which can be exploited just by sending specially crafted emails to the SMTP server.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5556/ivanti-csa-cloud-services-appliance-zero-day-attack'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/6.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti CSA (Cloud Services Appliance) zero-day Attack</h5> <span>Oct 08, 2024</span> <p class="card-text mb-0">What is the Attack?Attackers are actively exploiting multiple zero-day vulnerabilities affecting Ivanti CSA (Cloud Services Appliance) that could lead an attacker to gain admin access, bypass...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/events/5552'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/2.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/events.svg?v=32538" width="20" alt="events-logo"/> <span>Publications</span> </p> <h5 class="card-title">[Virus Bulletin 2024] Android Flutter Malware</h5> <span>Oct 02, 2024</span> <p class="card-text mb-0">This talk explains how to use Blutter to analyze malicious Android samples such as Android/Fluhorse and Android/SpyLoan.</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5551/ivanti-virtual-traffic-manager-vtm-authentication-bypass-vulnerability-cve-2024-7593'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/1.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Virtual Traffic Manager (vTM ) Authentication Bypass Vulnerability (CVE-2024-7593)</h5> <span>Sep 26, 2024</span> <p class="card-text mb-0">What is the Vulnerability?Ivanti Virtual Traffic Manager (vTM), a software application used to manage and optimize the delivery of applications across networks is affected by an authentication...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5550/apache-hugegraph-server-improper-access-control-vulnerability-cve-2024-27348'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/0.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Apache HugeGraph-Server Improper Access Control Vulnerability (CVE-2024-27348)</h5> <span>Sep 25, 2024</span> <p class="card-text mb-0">What is the Vulnerability?CVE-2024-27348 is a remote code execution (RCE) vulnerability affecting Apache HugeGraph-Server. HugeGraph is a versatile graph database that integrates seamlessly with...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/geoserver-rce'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/32.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">GeoServer RCE Attack</h5> <span>Sep 23, 2024</span> <p class="card-text mb-0">A remote code execution vulnerability affecting GeoServer is under active exploitation, with recent attack attempts observed on 40,000+ FortiGuard sensors. This vulnerability (CVE-2024-36401) is...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5523/ivanti-cloud-services-appliance-csa-os-command-injection-vulnerability-cve-2024-8190'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/25.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-8190)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Vulnerability?An OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) version 4.6 allows an authenticated attacker to remotely execute code. The attacker must...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/threat-signal-report/5524/raisecom-gateway-command-injection-cve-2024-7120'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/26.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/signalreport.svg?v=32538" width="20" alt="signalreport-logo"/> <span>Threat Signal Report</span> </p> <h5 class="card-title">Raisecom Gateway Command Injection (CVE-2024-7120)</h5> <span>Sep 13, 2024</span> <p class="card-text mb-0">What is the Attack?FortiGuard Labs observes attack attempts targeting certain models of Raisecom Gateway that are vulnerable to CVE-2024-7120. This attack can be initiated remotely and may lead to...</p> </div> </div> </div> </div> </div> <div class="col-12 slide"> <div class="row"> <div class="col-lg-4 mb-4"> <div class="card" onclick="location.href = '/outbreak-alert/russian-cyber-espionage'" style="height: 500px;"> <div class="card-header" style="background-image: url('https://filestore.fortinet.com/fortiguard/static/images/random/12.jpg?v=32538')"> </div> <div class="card-body"> <p class="mb-1"><img class="me-1" src="https://filestore.fortinet.com/fortiguard/static/images/icons/outbreakalert.svg?v=32538" width="20" alt="outbreakalert-logo"/> <span>Outbreak Alert</span> </p> <h5 class="card-title">Russian Cyber Espionage Attack</h5> <span>Sep 09, 2024</span> <p class="card-text mb-0">FortiGuard Labs continues to observe attack attempts exploiting the vulnerabilities highlighted in the recent CISA advisory about Russian military cyber actors. These actors are targeting U.S. and...</p> </div> </div> </div> </div> </div> </div> <div class="ftnt-arrow-resources" id="fgl-blog"> <button class="ftnt-slide-prev" style="opacity: 0.4; cursor: pointer;" aria-label="Previous" disabled=""></button> <input type="range" min="1" max="100" value="0" class="ftnt-progress" id="resources-progressbar" aria-label="resources progress bar" disabled="" style="opacity: 1;"> <button class="ftnt-slide-next" style="float: right; opacity: 1; cursor: pointer;" aria-label="Next"></button> </div> </div> </div> </div> <div class="serivce-update-section" id="service-update-section"> <div class="container-xxl"> <h2>Services</h2> <div class="row home-updates-items"> <div class="service-updates"> <ul class="service-categories" role="list"> <li class="service-category-item active-category" data-id="0" onclick="toggleSrvupd(this)" role="button listitem" tabindex="0" aria-label="Network item"> <div class="service-category-item-wrapper"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/network.svg?v=32538" alt="network" loading="lazy"> </div> <div class="title"><b>Network</b></div> </div> </li> <li class="service-category-item " data-id="1" onclick="toggleSrvupd(this)" role="button listitem" tabindex="0" aria-label="Application item"> <div class="service-category-item-wrapper"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/application.svg?v=32538" alt="application" loading="lazy"> </div> <div class="title"><b>Application</b></div> </div> </li> <li class="service-category-item " data-id="2" onclick="toggleSrvupd(this)" role="button listitem" tabindex="0" aria-label="Files and Endpoint item"> <div class="service-category-item-wrapper"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/contentendpoint.svg?v=32538" alt="contentendpoint" loading="lazy"> </div> <div class="title"><b>Files and Endpoint</b></div> </div> </li> <li class="service-category-item " data-id="3" onclick="toggleSrvupd(this)" role="button listitem" tabindex="0" aria-label="Security Operations item"> <div class="service-category-item-wrapper"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/response.svg?v=32538" alt="response" loading="lazy"> </div> <div class="title"><b>Security Operations</b></div> </div> </li> </ul> <div class="services" role="region" aria-label="set of services available for selected service category"> <p>Select one for more details: </p> <ul class="services-group active-service" data-id="0" role="list" aria-label="Network group"> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/arae"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/antireckon.svg?v=32538" alt="Anti-recon and Exploit" loading="lazy"/> </div> <div class="title"><p>Anti-recon and Exploit</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/botnet"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/botnetdom.svg?v=32538" alt="Botnet Domain Reputation DB" loading="lazy"/> </div> <div class="title"><p>Botnet Domain Reputation DB</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/dlp"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/dlp.svg?v=32538" alt="Data Loss Prevention" loading="lazy"/> </div> <div class="title"><p>Data Loss Prevention</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/ioc"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/ioc.svg?v=32538" alt="Indicators of Compromise" loading="lazy"/> </div> <div class="title"><p>Indicators of Compromise</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/ips"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/ips.svg?v=32538" alt="Intrusion Protection" loading="lazy"/> </div> <div class="title"><p>Intrusion Protection</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/irdb"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/irdb.svg?v=32538" alt="IP Reputation/Anti-Botnet" loading="lazy"/> </div> <div class="title"><p>IP Reputation/Anti-Botnet</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/isdb"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/isdb.svg?v=32538" alt="Internet Services" loading="lazy"/> </div> <div class="title"><p>Internet Services</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/sdns"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/dns.svg?v=32538" alt="Secure DNS" loading="lazy"/> </div> <div class="title"><p>Secure DNS</p> </div> </a> </li> </ul> <ul class="services-group inactive-service" data-id="1" role="list" aria-label="Application group"> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/app"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/app-control.svg?v=32538" alt="Application Control" loading="lazy"/> </div> <div class="title"><p>Application Control</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/fadc-waf"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fadc.svg?v=32538" alt="Web Application Security (FADC)" loading="lazy"/> </div> <div class="title"><p>Web Application Security (FADC)</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/fct-app"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fct_app_firewall.svg?v=32538" alt="Client Application Firewall" loading="lazy"/> </div> <div class="title"><p>Client Application Firewall</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/websecurity"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/websec.svg?v=32538" alt="Web Application Security (FWB)" loading="lazy"/> </div> <div class="title"><p>Web Application Security (FWB)</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/ots"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/ots.svg?v=32538" alt="OT Threat" loading="lazy"/> </div> <div class="title"><p>OT Threat</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/iotapp"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/iotapp.svg?v=32538" alt="IoT Detection" loading="lazy"/> </div> <div class="title"><p>IoT Detection</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/webfiltering"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/web-filter.svg?v=32538" alt="Web Filtering" loading="lazy"/> </div> <div class="title"><p>Web Filtering</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/casb"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/casb.svg?v=32538" alt="Inline-CASB Application Definitions" loading="lazy"/> </div> <div class="title"><p>Inline-CASB Application Definitions</p> </div> </a> </li> </ul> <ul class="services-group inactive-service" data-id="2" role="list" aria-label="Files and Endpoint group"> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/antivirus"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/virus.svg?v=32538" alt="AntiVirus" loading="lazy"/> </div> <div class="title"><p>AntiVirus</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/dds"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/device_detection.svg?v=32538" alt="IoT Detection" loading="lazy"/> </div> <div class="title"><p>IoT Detection</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/fedr"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fedr.svg?v=32538" alt="Endpoint Detection and Response" loading="lazy"/> </div> <div class="title"><p>Endpoint Detection and Response</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/epvuln"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/epvuln.svg?v=32538" alt="Endpoint Vulnerability" loading="lazy"/> </div> <div class="title"><p>Endpoint Vulnerability</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/mobile"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/mobile.svg?v=32538" alt="Mobile Services" loading="lazy"/> </div> <div class="title"><p>Mobile Services</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/sandbox"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/sandbox_rating.svg?v=32538" alt="Sandbox Engine" loading="lazy"/> </div> <div class="title"><p>Sandbox Engine</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/eoap"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/eoap.svg?v=32538" alt="FortiClient Outbreak Detection" loading="lazy"/> </div> <div class="title"><p>FortiClient Outbreak Detection</p> </div> </a> </li> </ul> <ul class="services-group inactive-service" data-id="3" role="list" aria-label="Security Operations group"> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/breach-attack-simulation"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/ftesterattdb.svg?v=32538" alt="Breach Attack Simulation" loading="lazy"/> </div> <div class="title"><p>Breach Attack Simulation</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/fortindr"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortindr.svg?v=32538" alt="FortiNDR" loading="lazy"/> </div> <div class="title"><p>FortiNDR</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/fortidevsec"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortidevsec.svg?v=32538" alt="FortiDevSec" loading="lazy"/> </div> <div class="title"><p>FortiDevSec</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/fortisiem"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisiem.svg?v=32538" alt="FortiSIEM Outbreak Detection" loading="lazy"/> </div> <div class="title"><p>FortiSIEM Outbreak Detection</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/outbreak-detection-service"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/outbreak-detection.svg?v=32538" alt="Outbreak Detection Service" loading="lazy"/> </div> <div class="title"><p>Outbreak Detection Service</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/pentesting"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/pentest.svg?v=32538" alt="Pen Testing service" loading="lazy"/> </div> <div class="title"><p>Pen Testing service</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/services/secr"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/security-rating.svg?v=32538" alt="Security Rating Services" loading="lazy"/> </div> <div class="title"><p>Security Rating Services</p> </div> </a> </li> <li class="service-item" role="listitem" tabindex="0"> <a href="/updates/odcs"> <div class="icon"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/outbreak-deception.svg?v=32538" alt="Outbreak Deception Service" loading="lazy"/> </div> <div class="title"><p>Outbreak Deception Service</p> </div> </a> </li> </ul> </div> </div> </div> </div> </div> <div class="certification-section"> <div class="container-xxl"> <h2>Certifications</h2> <ul class="row list-unstyled text-center" role="list" aria-label="List of certifications"> <li class="offset-lg-1 col-lg-2 av" role="listitem"> <a target="_blank" href="https://www.fortinet.com/corporate/about-us/product-certifications/av-comparatives" class="thumbnail cert_av_comparatives"><img src="https://filestore.fortinet.com/fortiguard/static/images/cert_logos/av_cert_icon.png?v=32538" alt="av comparatives logo" loading="lazy" width="60px"/></a> </li> <li class="col-lg-2 ccs" role="listitem"> <a target="_blank" href="https://www.fortinet.com/corporate/about-us/product-certifications/common-criteria" class="thumbnail cert_common_criteria"><img src="https://filestore.fortinet.com/fortiguard/static/images/cert_logos/cert-common-criteria.webp?v=32538" alt="common criteria logo" loading="lazy" width="130px"/></a> </li> <li class="col-lg-2 nss" role="listitem"> <a target="_blank" href="https://www.fortinet.com/corporate/about-us/product-certifications/nss-labs" class="thumbnail cert_nss_labs"><img src="https://filestore.fortinet.com/fortiguard/static/images/cert_logos/nss_cert_icon.png?v=32538" alt="nss labs logo" loading="lazy" width="120px"/></a> </li> <li class="col-lg-2 vb" role="listitem"> <a target="_blank" href="https://www.fortinet.com/corporate/about-us/product-certifications/virus-bulletin" class="thumbnail cert_vb"><img src="https://filestore.fortinet.com/fortiguard/static/images/cert_logos/cert-virus-bulletin.png?v=32538" alt="vb logo" loading="lazy" width="180px"/></a> </li> <li class="col-lg-2 mitre-att-ck" role="listitem"> <a target="_blank" href="https://www.fortinet.com/corporate/about-us/product-certifications/mitre-att-ck" class="thumbnail cert_mitre"><img src="https://filestore.fortinet.com/fortiguard/static/images/cert_logos/cert-mitre-att-ck.webp?v=32538" alt="mitre logo" loading="lazy" width="80px"/></a> </li> </ul> </div> </div> </div> </div> </main> <footer> <div class=container-xxl> <div class="row"> <div class="col-md-4"> <p class="footer-logo"><a href="https://www.fortinet.com" target="_blank"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortinet-footer-logo.svg?v=32538" alt="fortinet logo in the footer" loading="lazy"/> </a></p> </div> <div class="col-md-5"> <div class="bottom-nav"> <ul role="list" aria aria-label="list of links namely contact us, Legal, Privacy, faq, partners, feedback "> <li class="contact" role="listitem"> <a href="/contactus">Contact Us</a> </li> <li class="legal" role="listitem"> <a href="https://www.fortinet.com/corporate/about-us/legal.html" target="_blank">Legal</a> </li> <li class="privacy" role="listitem"> <a href="https://www.fortinet.com/corporate/about-us/privacy.html" target="_blank">Privacy</a> </li> <li class="partners" role="listitem"> <a href="/partners">Partners</a> </li> <li class="feedback" role="listitem"> <a href="/faq/general-contact">Feedback</a> </li>  </ul> </div> </div> <div class="col-md-3"> <ul class="social"> <li><a href="https://www.facebook.com/FortiGuard.Labs" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/facebook_icon_footer.svg?v=32538" alt="facebook-icon-footer" loading="lazy"/></a></li> <li><a href="https://x.com/FortiGuardLabs" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/x_icon_footer.svg?v=32538" alt="twitter-icon-footer" style="width:25px !important;" loading="lazy"/></a></li> <li><a href="https://www.linkedin.com/showcase/3668640/" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/linkedin_icon_footer.svg?v=32538" alt="linkedin-icon-footer" loading="lazy"/></a></li> <li><a href="https://www.instagram.com/fortinet/" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/instagram_icon_footer.svg?v=32538" alt="linkedin-icon-footer" loading="lazy"/></a></li> <li><a href="/rss-feeds"><img src="https://filestore.fortinet.com/fortiguard/static/images/rss_icon_footer.svg?v=32538" alt="rss-icon-footer" loading="lazy"/></a></li> </ul> </div> </div> <div class="row"> <div class="col-md-12"> <p>Copyright 漏 2024 Fortinet, Inc. All Rights Reserved.</p> </div> </div> </div> </footer> <script src="https://filestore.fortinet.com/fortiguard/static/scripts/vendor.min.js?v=32538"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/app.min.js?v=32538"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/script.min.js?v=32538"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/bundle.min.js?v=32538"></script> <script src="https://filestore.fortinet.com/scripts/privacy-v2.min.js?c=92517957" async></script> </body> </html>

CINXE.COM

FortiGuard Labs