Fortinet has released patches for CVE-2026-24858, an authentication bypass exploited in the wild to compromise devices.

Automated infections of potentially fully patched FortiGate devices are allowing threat actors to steal firewall ...

Admins say attackers are still getting in despite recent patches FortiGate firewalls are getting quietly reconfigured and ...

Network security giant Fortinet locked out cloud customers from its single sign-on service until they update device firmware ...

Fix didn't quite do the job – attackers spotted logging in Fortinet has confirmed that attackers are actively bypassing a December patch for a critical FortiCloud single sign-on (SSO) authentication ...

The cybersecurity company pointed out that the fresh campaign resembles December 2025 attacks targeting CVE-2025-59718 and CVE-2025-59719, two critical-severity defects impacting the FortiCloud SSO ...

To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...

All SAML SSO implementations, including FortiCloud SSO, are vulnerable to authentication bypass and malicious configuration ...

Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...

Fortinet firewalls are under threat from a single sign-on (SSO) vulnerability, which allows unauthorized configuration changes.

Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall ...