Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

CVE-2026-106173coverage

fortisiem fortinet unauthenticated remote code execution poc

8 more topics

exploit cve-2026-106173 cvss 9.4 path traversal proof-of-concept public exploit security flaw vulnerability

Bleeping Computer

1 month ago

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. [...]

fake chatgpt gemini sites advertising accounts login credentials multi-factor authentication

7 more topics

mfa codes browser-in-browser attacks ad account managers campaign targeting ad account managers claude perplexity

Dark Reading

1 month ago

As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half

New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say AI limits their skill development.

ai soc career ladder satisfaction 91%

10 more topics

entry gets harder nearly half swimlane research paradox ai detection ai response defenders edge security pros skill development ai limits

Dark Reading

1 month ago

'NeedyMantis' Provides Long-Term Access to Compromised Networks

Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.

needy mantis long-term access compromised networks microsoft observed china-based actor

7 more topics

malware framework previously unidentified targeted intrusions telcos universities medical government-related organizations

The Hacker News

1 month ago

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

hackers needy mantis malware long-term access breached networks

8 more topics

microsoft technical analysis targeted intrusions telecommunications organizations universities medical nonprofits intergovernmental organizations government contractors

The Register

2 months ago