company
Fortinet is a cybersecurity vendor known for FortiGate firewalls and network security appliances, with FortiGuard Labs as its threat intelligence unit.
No evidence-backed relationships are recorded.
Fortinet confirmed a 9.8-rated, unauthenticated file-write zero-day in FortiMail that attackers are using to drop a reboot-surviving ld.so.preload rootkit. Patching closes the hole but leaves any implant already on the appliance in place.
Reality
Meta confirmed it is letting go of the Virtue AI safety team it hired in June, ending the arrangement after four months. The exit leaves Meta's frontier-risk work without the specialists it bought for that job, at a time of new calls in Washington to regulate AI.
Perspective Coverage
3 publishersReality
Fortinet says attackers are exploiting a CVSS 9.8 unauthenticated file-write flaw in FortiMail, and no fixed release has shipped yet. Until builds arrive, its two workarounds are the only protection, including for 7.2 users told to move to a 7.4 branch that is still unpatched.
Perspective Coverage
7 publishersReality
Australia's ACSC told Fortinet users on 18 June to rotate all admin and VPN credentials immediately, the first of six steps in its alert. On hosted or co-managed gateways, each step first needs someone to settle who holds the accounts and who has to act.
Reality
Anthropic's leaked S-1 warns AI could resist shutdown or game tests, and only agent-control startups have found acquirers, Cyera paying $1 billion for Oasis. Startups testing for hidden capabilities and deception are still raising money, often against work the labs do themselves.
Reality
Fortinet says the Mirai-derived botnet bolts a SOCKS5 relay onto compromised routers, cameras and Confluence hosts. Sellable proxy capacity changes what you hunt for.
Perspective Coverage
5 publishersReality
More than 100 companies signed a call for collective action on cyber defence whose first principle is that status quo security will not be enough, a sentence co-signed by five of the vendors who supply that status quo.
Perspective Coverage
5 publishersReality
ACSC flagged credential attacks on Fortinet gateways with no CVE or version list, so scans counting 983,996 FortiGate assets are the sizing fallback. A certificate-key filter narrows the count to 254,801 but cannot show which admin logins face the internet.
Reality
CISA says all four are under active exploitation, and three of them are unauthenticated flaws in edge and management appliances. Its own alert cites BOD 26-04 and prints no due date for any of them.
Perspective Coverage
4 publishersReality
Orkes Conductor evaluates workflow expressions on a GraalVM context with the sandbox disabled, and Fortinet blocked about 1,300 exploitation attempts against CVE-2026-58138 over two days in September.
Reality
Moving an ASA or PAN-OS rulebase onto a FortiGate means picking the NAT model on an empty appliance, because the toggle that gives back one shared NAT table is gated on every VIP and IP pool reference in the policy set.
Reality
An unauthenticated POST to the Conductor Workflow API registers a definition whose inline expression evaluates in a GraalVM context with host access enabled, and the default image runs that process as root. Empirical Security logged attempts in August.
Reality
Fortinet switched off FortiCloud SSO worldwide on January 26 and turned it back on the next day with server-side changes. Devices already fully patched against the two 2025 SAML bypasses were compromised anyway.
Reality
The PIVOT program was announced on September 15 with Broadcom, CrowdStrike, Fortinet, Palo Alto Networks and Sophos signed up, and the first comparative results are due in January 2027. MITRE's rival test drew 11 vendors in 2025.
Reality
Hunt.io says a threat actor left 298 files in an open directory in Thailand, including FortiGate and F5 exploit scripts written for 3BB and a MeshCentral backdoor that the cleanup script checked was still running.
Reality
CVE-2026-76461 is under active exploitation, hits every physical and virtual Secure Email Gateway whatever its configuration, and has no workaround. CISA gave federal civilian agencies until September 17 to install the fixed builds.
Reality
Dario Amodei's call for the industry to pace itself sent software past chips by 10.67 percentage points, the widest one-day gap Dow Jones Market Data has recorded, and the analysts making the bull case date the money to 2027.
Perspective Coverage
3 publishersReality
Hunt.io captured the operator's own server on June 3, 2026, while the intrusion was live. The files on it show password spraying across more than 55 internal hosts and a cleanup script written to erase everything except the MeshCentral agent.
Reality
The letter arrives with receipts, since the labs telling everyone to harden networks are the ones whose agents got loose, and the funding it requests would flow to products they already sell. Intrusion becomes a budget line this quarter.
Perspective Coverage
8 publishersReality
Kiteworks' eighth acquisition in under five years puts policy decisions inline on email, file shares and agent traffic. The price is undisclosed, and CTech estimates tens of millions for a startup 15 months out of stealth.
Reality
Security · September 10, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 18, 2026 · 1 publisher
Product · August 18, 2026 · 1 publisher
Security · August 18, 2026 · 2 publishers
Product · August 17, 2026 · 1 publisher