Fortinet's FortiGate firewalls and FortiProxy web proxies are being impacted by a new critical security flaw, which could be exploited to facilitate arbitrary operation execution through specially crafted HTTP(S) requests, The Hacker News reports.
The authentication bypass vulnerability, tracked as CVE-2022-40684, affects FortiOS versions 7.0.0 to 7.0.6 and 7.2.0 to 7.2.1, as well as FortiProxy versions 7.0.0 to 7.0.6 and 7.2.0, said Fortinet in a private warning sent to users, which also noted that the bug has already been remedied in FortiOS 7.0.7 and 7.2.2, as well as FortiProxy 7.0.7 and 7.2.1. Users of vulnerable Fortinet systems have also been advised to deactivate internet-facing HTTPS Administration or enforce a "local-in traffic" firewall policy until the upgrades have been performed. Fortinet later noted that public disclosure of the flaw has been delayed up until its customers have remediated the issue. "There are instances where confidential advance customer communications can include early warning on advisories to enable customers to further strengthen their security posture, which then will be publicly released in the coming days to a broader audience. The security of our customers is our first priority," said Fortinet.
Vulnerable SSH servers could be compromised to secure private RSA host keys through a new passive attack method that involves the observation of computational faults during the signing process that exposes the private keys, The Hacker News reports.
BleepingComputer reports that widely used 3D computer graphics software suite Blender has been impacted by site outages due to distributed denial-of-service attacks that have been ongoing since the weekend.
Network security: New tools for an aging art
The Latest Cybercriminal TTPs: How Public-Sector Defenders Can Stay Ahead
Playing network traffic cop in multi-cloud environments: A guide to detecting & restricting lateral movement
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news