Tag: configuration changes

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious Configuration Changes Observed On Fortinet FortiGate Devices via SSO Accounts

A new cluster of automated malicious activity involving unauthorized firewall configuration changes on FortiGate devices has been observed. The activity includes creation of generic accounts for persistence, configuration changes granting VPN access, and exfiltration of firewall configurations. The…
exfiltration
persistence
vpn
fortigate
unauthorized access
firewall
sso
CVE-2025-59718
CVE-2025-59719
2026-01-22
configuration changes
Published: January 22, 2026
Linked vulnerabilities : CVE-2025-59718 (CVSS 9.8), CVE-2025-59719 (CVSS 9.8), CVE-2025-69258 (CVSS 9.8), CVE-2025-25249 (CVSS 8.1), CVE-2025-64155 (CVSS 9.8)
Downloadable IOCs: 5
Click here to see more Attack Reports