The Journey of Life.....: Fortinet

Showing posts with label Fortinet. Show all posts

Thursday, February 19, 2026

CISA Directive: Secure-by-Design Edge Device Requirements — Federal mandate ordering the removal or hardening of unsupported edge devices amid rising nation-state threats.
Microsoft February 2026 Patch Tuesday: 6 Active Zero-Days — Critical updates for vulnerabilities in Windows Shell and Office OLE mitigations.

ISC2 One Million Certified in Cybersecurity (1MCC) — Free foundational training and certification exams for entry-level professionals.
Fortinet Free NSE Training: AI-Driven Security Operations — On-demand labs for zero-trust networking and SOC automation.
Cisco NetAcademy: Cybersecurity Pathways — Certified training on network protection and data security fundamentals.

Microsoft Patch Tuesday January 2026: 114 CVEs Including Active Zero-Day - Microsoft released its January 2026 Patch Tuesday addressing 114 vulnerabilities, including CVE-2026-20805, an actively exploited Windows DWM zero-day. Critical patches also address flaws in SharePoint and Office. Source: Secure IT World
Critical n8n RCE Vulnerabilities Disclosed (CVE-2026-21858, CVE-2026-21877) - n8n workflow automation platform disclosed two critical RCE vulnerabilities with CVSS 10.0 ratings: CVE-2026-21858 (unauthenticated RCE via webhook parsing) and CVE-2026-21877 (authenticated RCE). Both allow complete system takeover. Source: The Hacker News
Palo Alto Networks GlobalProtect DoS Vulnerability (CVE-2026-0227) - Palo Alto Networks addressed CVE-2026-0227, a high-severity DoS vulnerability (CVSS 7.7) affecting GlobalProtect Gateway and Portal. Proof-of-concept code is publicly available. Source: Palo Alto Networks Security Advisory
Fortinet FortiSIEM Critical Command Injection (CVE-2025-64155) - Fortinet disclosed CVE-2025-64155, a critical command injection vulnerability in FortiSIEM affecting multiple versions. Exploit code was released publicly on January 13, 2026, with immediate patching recommended. Source: eSentire Security Advisories

4 Outdated Habits Destroying Your SOC's MTTR - The Hacker News reports that leading SOCs in 2026 are reducing MTTR (Mean Time to Respond) and MTTD (Mean Time to Detect) using automated, behavior-based analysis instead of manual reviews and static scans. Source: The Hacker News
Cyber Threat Actors Intensify Attacks on Industrial Systems - According to Cyble reports, hacktivists and cybercriminals have significantly increased efforts to exploit vulnerabilities in industrial control systems (ICS), indicating a shift toward targeting critical infrastructure. Source: Infosecurity Magazine
Claude Cowork Exfiltrates Files Security Issue - Security researchers identified a critical issue with Claude's Cowork feature that can exfiltrate files, raising concerns about AI agent file handling and data exposure risks. Source: Prompt Armor

10 Cybersecurity Trends Defining 2026 - Auxis identifies critical 2026 trends including AI-driven cyber risk, record-high data breach costs in the US, third-party risk becoming the weakest link, and the emergence of sophisticated deepfake-based attacks. Source: Auxis Security

Cyber Risk Trends for 2026: Building Resilience - SecurityWeek article outlining four major cyber risk drivers: AI-enabled attacks, third-party ecosystem vulnerabilities, quantum computing threats, and geopolitical factors. Emphasizes resilience over prevention as attackers become more automated and intelligent. Source: SecurityWeek
Top 10 Cybersecurity Trends 2026 - Gartner Analysis - Gartner's analysis predicting shift from reactive monitoring to proactive, AI-assisted threat anticipation and automated remediation. Key focus areas include AI-driven defense mechanisms. Source: AgileBlue

Training Data Poisoning: The Invisible Cyber Threat of 2026 - TTMS article detailing training data poisoning as emerging invisible threat where attackers corrupt AI training datasets. This differs from other AI threats and requires new defensive strategies. Source: TTMS
Threat Intelligence Evolution in 2026 - High-quality threat intelligence critical as AI-driven threats make breaches faster and stealthier. Importance of catching threats proactively before they impact systems. Source: Cybersecurity News
Scattered Lapsus$ Resurfaces with Brokered Access Model - Threat Update: Scattered Lapsus$ cybercriminal gang resurfacing with new brokered access model, posing elevated risks to industrial and critical infrastructure sectors. Source: Industrial Cyber

Fortinet Vulnerability CVE-2023-49186 Under Attack - Legacy vulnerability in Fortinet firewalls facing renewed threat. Thousands of firewalls remain at risk despite December 2025 warning from the company. Source: Cybersecurity Dive

CVE-2026-21746 Information Disclosure Vulnerability - Vulnerability publicly disclosed on January 6, 2026. Organizations advised to check if they were affected during pre-patch period and apply available fixes immediately. Source: The Hacker Wire
CVE-2025-13915: Critical IBM API Connect Flaw - Critical authentication bypass vulnerability (CVSS 9.8) in IBM API Connect. Singapore warned of attack exploitation. Patches and mitigations released by IBM. Source: Cyble
n8n Platform Arbitrary Code Execution Vulnerability - New vulnerability discovered in n8n workflow automation platform allowing arbitrary code execution. Update recommended for all deployments. Source: GBHackers

AI Agent Security Plan 2026: Threats and Strategies - Analysis of common AI agent vulnerabilities and security risks emerging in 2026. Comprehensive strategies for building secure AI agent systems. Source: USCS Institute