To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single ...
Mandiant analyzed ShinyHunters' MO, detailing how it steals login and MFA codes.
Understand five best practices to overcome the most common SSO failure points and how organizations can reduce identity risk ...
Federation. Learn how to implement secure federated identity, manage STS, and bridge legacy apps with modern CIAM.
Master Enterprise SSO in 2025. Learn about SAML, OIDC, and CIAM strategies for CTOs and VP Engineering to secure B2B platforms and prevent data breach.
Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...
We continue to alert our readers to the uptick and successful use of vishing attacks against companies. Threat actors continue to be creative ...
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) ...
The flaw, tracked as CVE-2026-24858, allows an attacker with a registered device and a FortiCloud account to access devices ...
The cybersecurity company pointed out that the fresh campaign resembles December 2025 attacks targeting CVE-2025-59718 and CVE-2025-59719, two critical-severity defects impacting the FortiCloud SSO ...
Scattered LAPSUS$ Hunters are targeting major firms with sophisticated voice phishing attacks.
Fortinet released updates for an actively exploited FortiOS SSO authentication bypass flaw, CVE-2026-24858, now listed by CISA in KEV.