And then they send victims to the legit VPN download to hide their tracks A group of cybercriminals tracked as Storm-2561 is ...
Three vulnerabilities allowed hackers to bypass Fortigate and steal enterprise credentials.
Storm-2561 uses SEO poisoning to push fake VPN downloads that install signed trojans and steal VPN credentials. Active since 2025, Storm-2561 mimics trusted brands and abuses legitimate services. This ...
The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.
Throughout early 2026, SentinelOne’s Digital Forensics & Incident Response (DFIR) team has responded to several incidents where FortiGate Next-Generation Firewall (NGFW) appliances have been ...
Fortinet has unveiled a bevy of updates with an upgrade of its mainline operating system and additions to its security operations (SecOps) platform. Announced at its Accelerate 2026 event, the ...
Compare the top 5 Linux-friendly network security providers for small businesses. Discover reliable tools, features, and protection solutions designed for Linux environments.
Operations and hospital networks not affected, we're told Robotics-assisted surgical tech firm Intuitive said that ...
The malware is designed to steal the victim’s VPN login credentials. According to Microsoft, the attack uses search engine optimization (SEO) poisoning to push websites hosting the malicious VPN ...
Fortinet (NASDAQ:FTNT) used its investor briefing at Accelerate 2026 to reiterate its long-term strategy around “convergence” in cybersecurity, leaning on a single operating system, custom silicon, an ...
Latest FortiOS capabilities help organizations secure AI adoption, simplify operations, and strengthen protection across ...
Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.