Tag
fortios
Safeguard articles tagged "fortios" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Vulnerability Analysis
FortiOS CVE-2024-21762 Explained: The SSL VPN Out-of-Bounds Write RCE
CVE-2024-21762 is a pre-authentication out-of-bounds write in the FortiOS SSL VPN daemon that allows remote code execution. Here is the timeline, root cause, detection, and the full list of fixed versions.
Jul 4, 20265 min read
Ransomware
Play Ransomware: Supply Chain Exploitation Through Managed Service Providers
Play ransomware refined the MSP attack model, exploiting FortiOS and RDP vulnerabilities to cascade through managed service providers into hundreds of downstream organizations.
Nov 15, 20247 min read