Gbhackers Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability
Article Content
Browse articles 
Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with attackers bypassing security measures that were thought to be effective following a December patch. Organizations are advised to monitor their systems closely for suspicious activity.
Ask AI about this cluster
Answers cite the sources they use
Updated 221d ago How this analysis works
More articles in this cluster (35)
Following this threat?
Track Fortinet and CVE-2025-59718 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
TAG-193 Targets Central Asian Governments in Espionage Campaign TAG-193 has been linked to a series of espionage operations targeting government institutions in Russia, Tajikistan, Belarus, Armenia, and Uzbekistan from early 2025 to May 2026. The group utilized spearphishing tactics, including compromised accounts and malicious documents, to gain access to sensitive information… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…