Critical Fortinet Vulnerability Ahead, (Fri, Oct 7th)

Fortinet has contacted[1] its customers to update as soon as possible to the latest version of their firewall (Fortigate) and proxies (FortiProxy) to fix a critical vulnerability. Assigned %%cve:2022-40684%%, it is related to an authentication bypass on the administrative interface.

Continue reading Critical Fortinet Vulnerability Ahead, (Fri, Oct 7th)→

Posted in Uncategorized

Powershell Backdoor with DGA Capability, (Fri, Oct 7th)

DGA (“Domain Generation Algorithm”) is a popular tactic used by malware to make connections with their C2 more stealthy and difficult to block. The idea is to generate domain names periodically and use them during the defined period. An alternative is to generate a lot of domains and loop across them to find an available C2 server. Attackers just register a few domain names and can change them very quickly.

Continue reading Powershell Backdoor with DGA Capability, (Fri, Oct 7th)→

Posted in Uncategorized