Fortinet admits it found another worrying zero-day being exploited in attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet Discovers Zero-Day Exploited in Cyber Attacks Fortinet has identified a zero-day vulnerability, CVE-2025-58034, being actively exploited in cyber attacks. This flaw affects FortiWeb and is part of a broader trend where Fortinet vulnerabilities are frequently targeted in cyber-espionage and ransomware incidents, including attacks attributed to Chinese threat actors in February 2025. 2 sources 68