back to article China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

Chinese government-linked snoops are exploiting a zero-day bug in Fortinet's Windows VPN client to steal credentials and other information, according to memory forensics outfit Volexity. The Volexity threat intelligence team reported the zero-day vulnerability to Fortinet on July 18 after identifying its exploitation in the …

  1. harrys Bronze badge

    Marketing is ALWAYS cheaper then engineering!

    yukky mucky closed source, but results in happy days for maximizing profits by...

    1) reducing engineering costs/maintenenace

    2) ignore the big expense of fixing technical debt - a continous increasing but often ignored ongoing expense

    1password is ringing the warning bells at the mo .... their marketing hype is going into overdrive, its bloody everywhere, god knows how much they are currenty spending with creators

    Only one guaranteed winning group ... the greedy exec's with ego's to match their bank balance's

    shame a lotta people look at them with envy instead of disgust!

    rot always starts at the top

  2. Sir Sham Cad

    The most useful thing with "Fortinet" written on it that I have is a keyring bottle opener I got from a trade show donkeys ago. As far as I'm aware it's not had a CVE attached to it since I got it.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like