Exploitation of existing Fortinet Vulnerabilities,
 The ASD has issued a Critical Alert to anyone that uses utilise Fortinet products,

• Fortinet has released information regarding their observation of active exploitation of previously known vulnerabilities affecting Fortinet devices, including:
• FG-IR-24-015: Out-of-bound Write in sslvpnd
• FG-IR-23-097: Heap buffer overflow in sslvpn pre-authentication
• FG-IR-22-398: Heap-based buffer overflow in sslvpnd.
• Fortinet have previously released patches for these vulnerabilities
• The observed post exploitation activity relates to either unpatched devices or those that were compromised prior to patching.

Further information can be found at Fortinet’s advisory page Analysis of Threat Actor Activity "https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity",

For our Clients and Sites we don't use this or know of a site with it in.

Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways, critical vulnerability,
 The ASD has issued a Critical Alert on anyone that uses the Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways,

As Ivanti have released information regarding active exploitation of a critical vulnerability in Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways https://www.ivanti.com/blog/security-update-pulse-connect-secure-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways,

For our Clients and Sites we don't use this or know of a site with it in.

To View Previous Months For This Year's Status Please Click Here.