Fortinet admits FortiGate SSO bug still exploitable despite December patch

Fix didn’t quite do the job – attackers spotted logging in

Fortinet has confirmed that attackers are actively bypassing a December patch for a critical FortiCloud single sign-on (SSO) authentication flaw after customers reported suspicious logins on devices supposedly fully up to date.…

This article has been indexed from The Register – Security

Read the original article: