Fortinet Warns of Yet Another Critical RCE Flaw

CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors. [TechWeb]( Follow Dark Reading: [RSS]( March 15, 2024 LATEST SECURITY NEWS & COMMENTARY [Fortinet Warns of Yet Another Critical RCE Flaw]( CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors. [Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists]( The hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week. [Windows SmartScreen Bypass Flaw Exploited to Drop DarkGate RAT]( Attackers use Google redirects in their phishing attack leveraging a now-patched vulnerability that spreads the multifaceted malware. [TikTok Ban Raises Data Security, Control Questions]( Approved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age. [FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products]( Here's what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government. [How to Identify a Cyber Adversary: What to Look For]( There are many factors involved in attributing a cyber incident to a specific threat actor. [(Sponsored Article) Defending Against Cyber Threats in the Age of AI]( Changing threat landscapes and artificial intelligence's evolving role in cyber defense have important lessons for defending against attacks. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [ChatGPT Spills Secrets in Novel PoC Attack]( Research is latest in a growing body of work to highlight troubling weaknesses in widely used generative AI tools. [Nissan Oceania Breached; 100K People Affected Down Under]( A possible ransomware attack has exposed government and personal data of Australians and New Zealanders, encompassing the carmaker's customers, dealers, and employees. [How to Identify a Cyber Adversary: Standards of Proof]( Identifying the who, what, and how behind a cyberattack is crucial for preventing future strikes. [Why You Need to Know Your AI's Ancestry]( Securing AI can't wait an hour, let alone a decade. [MORE]( PRODUCTS & RELEASES [Expel Releases Updated Toolkit in Response to NIST 2.0]( [Nozomi Networks Secures $100M Investment to Defend Critical Infrastructure]( [Red Canary Announces Full Coverage of All Major Cloud Providers]( [MORE PRODUCTS & RELEASES]( EDITORS' CHOICE [Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes]( Attackers can remotely execute code with system privileges by exploiting a vulnerability in the source code of the open source container management system. LATEST FROM THE EDGE [Creating Security Through Randomness]( How lava lamps, pendulums, and suspended rainbows keep the Internet safe. LATEST FROM DR TECHNOLOGY [Google's Post-Quantum Upgrade Doesn't Mean We're All Protected Yet]( Just because Google has put in the work to quantum-proof Chrome doesn't mean post-quantum security is all set. LATEST FROM DR GLOBAL [Malawi Passport System Back Online After Debilitating Cyberattack]( Passport printing and distribution will resume first in Lilongwe as the immigration system gets back on its feet. WEBINARS - [Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them]( - [Unbiased Testing. Unbeatable Results]( [View More Dark Reading Webinars >>]( WHITE PAPERS - [Gcore Radar]( - [Cheat Sheet - 5 Strategic Security Checkpoints]( - [Understanding Today's Threat Actors]( - [A Solution Guide to Operational Technology Cybersecurity]( - [Zero Trust Access For Dummies, 2nd Fortinet Special Edition]( - [2023 Work-from-Anywhere Global Study]( - [Building Cyber Resiliency: Key Strategies for Proactive Security Operations]( [View More White Papers >>]( FEATURED REPORTS - [Industrial Networks in the Age of Digitalization]( - [Zero-Trust Adoption Driven by Data Protection]( - [How Enterprises Assess Their Cyber-Risk]( [View More Dark Reading Reports >>]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: /cdn-cgi/l/email-protection?sp_aid=122137&elq_cid=22844169&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_03.15.24&sp_cid=52522&utm_content=DR_NL_Dark%20Reading%20Daily_03.15.24&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529#08 If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2024]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)