🚨 Hackers Exploit FortiGate SSL-VPN Vulnerability to Attack Broadband Provider Details: cybersecuritynews.com/fortig… The apparent initial target was a FortiGate 60F SSL-VPN appliance exposed through mail.]3bb.]co[.]th:10443. Eight reconnaissance scripts fingerprinted the VPN service, examined HTTP headers and FortiGate resources, and tested several historical vulnerabilities before the actor focused on CVE-2024-21762. According to the recovered scripts, the attacker first used controlled crashes and malformed chunked HTTP requests to determine whether the appliance was vulnerable. The final exploit reportedly combined heap spraying with a return-oriented programming chain to launch a reverse shell connecting to 92.63.180[.]133:9443, the same server hosting the exposed toolkit. #cybersecuritynews

🚨 Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild | Source: cybersecuritynews.com/chrome… Google has released an emergency Chrome security update that fixes a critical zero-day vulnerability already being exploited in real-world attacks. The flaw, tracked as CVE-2026-85046, affects the V8 JavaScript and WebAssembly engine used by Chrome to process web content. The company confirmed that it is aware of an exploit for the vulnerability existing in the wild. While Google did not disclose details about the attacks, affected targets, or the threat actors behind the activity, the active exploitation notice makes immediate patching important for all Chrome desktop users. #cybersecuritynews