Skip to content
Threat Feed
Subscribe

Product

FortiProxy

4 briefs RSS
critical threat

Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector

The Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.

www.acosol.es +41 Qilin +1 ransomware double-extortion golang agriculture food-production
2r 13t 149i updated
high threat

ServiceNow Critical Sandbox Escape Vulnerability (CVE-2026-6875)

ServiceNow has released a security advisory addressing CVE-2026-6875, a critical sandbox escape vulnerability affecting multiple product versions including Brazil, Australia, Zurich, and Yokohama, which could allow an attacker to bypass security boundaries and execute arbitrary code with elevated privileges.

exploited Brazil +18 vulnerability servicenow cloud
3c updated
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

Fortinet edge appliances +37 kerberos coercion dns cve-2025-33073
3r 3t 3i updated
critical advisory

Fortinet Appliance Authentication Bypass Vulnerability (CVE-2022-40684) Exploitation

Exploitation of CVE-2022-40684, a Fortinet appliance authentication bypass vulnerability, allows unauthorized REST API access to modify system configurations, potentially leading to complete system compromise.

FortiOS +2 cve-2022-40684 fortinet authentication-bypass network-appliance initial-access
2r 2t