Fortinet, a major cybersecurity company, had a week filled with security vulnerabilities, disclosure mishaps, and a toothbrush DDoS attack claim. The week started with the disclosure of two critical security vulnerabilities in FortiSIEM, which were mistakenly linked to a previous advisory and then later confirmed to be new vulnerabilities. The company took more than 73 hours to issue an official response, which was considered unprofessional. In addition to this, a critical security vulnerability in FortiOS, impacting its SSL VPN, was disclosed. This vulnerability allows remote unauthenticated attackers to achieve code execution and is believed to have already been exploited as a zero-day. Fortinet has urged users to patch vulnerable VPNs as soon as possible. The company was also tangled in a toothbrush DDoS attack claim, which turned out to be a hypothetical situation that was misinterpreted by the media. Overall, Fortinet’s week was plagued with security issues and mishandled disclosures.
Fortinet’s week: a forgettable glance
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-62.png)
Latest from News
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-38-720x480.jpg)
Black Hat 2024 Cybersecurity Pulse Report – Don’t Miss Out
Cybersecurity Pulse Report Summary TLDR: Key Points Cybersecurity Pulse Report Black Hat 2024 Edition provides expert insights into critical security challenges. AI-driven analysis compiles
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-32-720x480.jpg)
Moody’s: Cyber Insurance Competition Rises, Prices Fall
Moody’s Ratings Article Summary TLDR: Key Points: Cyber insurance market poised for growth as cyberattacks increase. New entrants in the market may lead to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-78-720x480.png)
Gen Alpha: Cybersecurity meets AI in a digital era
TLDR: Generation Alpha, children of Millennials, are growing up in an AI-native world where AI is an integral part of daily life. Cybersecurity in
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-73-720x480.png)
London transport apps hit as TFL data feeds go offline
Summary of Transport for London cyber-attack article TLDR: Transport for London (TfL) has restricted access to live travel data and customer services due to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-89-720x480.png)
August 2024: 36 Cybersecurity M&A Deals Unveiled
“`html TLDR: Key Points: 36 cybersecurity-related M&A deals announced in August 2024 Major deals include Ark-Vantyr, Check Point-Cyberint, Cisco-Robust Intelligence, DigiCert-Vercara, EQT-Acronis Summary: Thirty-six