this post was submitted on 25 Dec 2025
3 points (100.0% liked)

blueteamsec

578 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
3
Product Security Advisory and Analysis: Observed Abuse of FG-IR-19-283 | Fortinet Blog (www.fortinet.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] slazer2au@lemmy.world 3 points 1 day ago

Additional configuration to prevent this FortiGate behavior was introduced in FortiOS 6.0.10, 6.2.4, 6.4.1 as part of FG-IR-19-283 published in July 2020.

Who the hell has not patched since 2020?

looks at several 1000C we still have in service. ah fuck.