Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs

Yes, I’ve made a logo in crayon and named this FortiJump.Did you know there’s widespread exploitation of FortiNet products going on using a zero day, and that there’s no CVE? Now you do.I’ve even made a picture explaining!I give you all rights to use this image.Back on October 13th, I started a Mastodon thread for something I’d come across:Kevin Beaumont (@GossiTheDog@cyberplace.social)The thread is a bit wild, I didn’t know about the FortiNet private notification as I’m just an InfoSec pleb (In… Read More