Fortinet Auth Bypass Weaponized, Ransomware Hits Healthcare Again, and CISA Expands KEV Catalog

News

Fortinet FortiOS Authentication Bypass Under Active Exploitation

A critical auth bypass in FortiOS is being actively exploited in the wild, letting attackers gain super-admin access without credentials. If you're running FortiOS appliances on the perimeter, patch immediately or take them offline.

CISA Adds Multiple New Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA pushed fresh KEV additions covering flaws in widely deployed enterprise software, triggering mandatory federal patch deadlines. Treat the KEV catalog as your prioritization shortlist even if you're not a federal shop.

Tools

Grype Container Vulnerability Scanner Drops Updated CVE Matching Engine

Anchore's Grype pushed an update improving CVE match accuracy and reducing false positives on container image scans. If you're doing any containerized workloads, this is worth pulling into your CI pipeline today.