Skip to content
Threat Feed
Subscribe

Product

FortiWeb

2 briefs RSS
high threat

Fortinet Authentication Vulnerabilities in FortiWeb and FortiManager

Fortinet has patched multiple high-severity vulnerabilities, including authentication bypasses in FortiWeb and FortiManager, alongside a buffer overflow in FortiClient for Windows.

exploited FortiWeb +2
2t 3c
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +38 kerberos coercion dns cve-2025-33073
3r 3t 4c 4i updated