Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.
The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.
Continue reading Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks→

Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension

The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.
The post Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension appeared first on SecurityWeek.
Continue reading Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension→

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products.
The post ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws appeared first on SecurityWeek.
Continue reading ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws→

Ivanti Patches Critical Flaws Across Enterprise Security Products

Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws.
The post Ivanti Patches Critical Flaws Across Enterprise Security Products appeared first on Se… Continue reading Ivanti Patches Critical Flaws Across Enterprise Security Products→

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days

The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities.
The post Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days appeared first on Sec… Continue reading Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days→