Fortinet FortiGate 2025 Firewall Guide

Choosing the right firewall isn’t one-size-fits-all. We’ve compared five Fortinet FortiGate models—30G, 50G, 70G, 100F, and Rugged 70G-5G-DUAL—by performance, features, and best use cases.

From small office POS security to enterprise-scale SD-WAN to ruggedized IoT environments—there’s a FortiGate for every scenario.

Read: https://datacenter360.ca/news/fortinet-firewall-comparison-2025/
#CyberSecurity #Fortinet #Firewalls #InfoSec #NetworkSecurity #ThreatDetection

CISA has added Fortinet FortiWeb SQL Injection Vulnerability to the KEV catalogue. That's CVE-2025-25257 https://www.cve.org/CVERecord?id=CVE-2025-25257

CISA KEV catalogue: https://www.cisa.gov/known-exploited-vulnerabilities-catalog #CISA #cybersecurity #infosec #Fortinet

Fact #Fortinet

New PoC dropped:

https://github.com/0xbigshaq/CVE-2025-25257

#threatintel, #fortinet

Unauthenticated SQL injection in GUI in FortiWeb - CVE-2025-25257

#vulnerabilitymanagement #cybersecurity #fortinet #vulnerability

https://vulnerability.circl.lu/vuln/CVE-2025-25257#comments

CISA Adds One Known Exploited Vulnerability to Catalog https://www.cisa.gov/news-events/alerts/2025/05/14/cisa-adds-one-known-exploited-vulnerability-catalog

While digging into some #Fortinet vulnerabilities, I discovered a set of CVEs that were rejected for being unused.

I'm wondering how this is actually helping vulnerability management. Does this mean those will be never used? or something else?

#vulnerability #cve #vulnerabilities

https://vulnerability.circl.lu/vuln/cve-2025-46221

LOL Fortinet

BleepingComputer: Over 16,000 Fortinet devices compromised with symlink backdoor

https://www.bleepingcomputer.com/news/security/over-16-000-fortinet-devices-compromised-with-symlink-backdoor/

What a mess…

Hackers leak configs and VPN credentials for 15,000 FortiGate devices https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

Hacking group leaks Fortinet users’ details on dark web

Details from more than 15,000 devices exposed

https://www.computing.co.uk/news/2025/security/hacking-group-leaks-fortinet-users-details-dark-web

Hey, legit impressed by Fortinet's changes to improve patching speed and adoption rates.

https://www.fortinet.com/blog/industry-trends/fortinet-secure-by-design-commitments-making-measureable-progress-in-cybersecurity

They did two big things:

1. Separated bugfix vs feature releases, to help operational teams manage risk and reduce patching friction

2. Created an "auto update" option in specific controlled circumstances

Data-driven, too - graphs, etc. show that the changes have real security value.

Needed some good news today!

A little late for Halloween but just as scary: Nearly 1 million Fortinet and SonicWall devices with actively exploited vulnerabilities are exposed on the internet.
#Cybersecurity #NetworkSecurity #Fortinet #FortiJump #FortiManager #SonicWall #Security #Ransomware #Cyberattacks #ThreatIntelligence #Vulnerabilities

https://thecyberexpress.com/vulnerable-fortinet-sonicwall-devices-exposed/

Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)

Details https://vulnerability.circl.lu/vuln/CVE-2024-47575
MISP event https://www.circl.lu/doc/misp/feed-osint/4fe85264-fb26-494e-8eb7-da101e19e291.json

#fortinet #infosec #vulnerability
@misp @circl

Kwetsbaarheid ontdekt in Fortinet FortiManager.
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0423
#cybersecurity #fortinet #fortimanager #NCSC-2024-0423

Alright y'all, how do we feel about Fortinet?

China state hackers infected 20,000 Fortinet VPNs, Dutch spy service says https://arstechnica.com/security/2024/06/china-state-hackers-infected-20000-fortinet-vpns-dutch-spy-service-says/ #fortinet #cybersecurity

China state hackers infected 20,000 Fortinet VPNs, Dutch spy service says - Enlarge

Hackers working for the Chinese government gained acc... - https://arstechnica.com/?p=2030948 #vulnerabilities #fortigate #security #exploits #fortinet #biz⁢ #vpns

Attacker Hunting Firewalls #cisco #citrix #f5 #pulsevpn #ivanti #watchguard #fortinet https://i5c.us/d30758

New #Fortinet RCE bug is actively exploited, CISA confirms.

https://www.bleepingcomputer.com/news/security/new-fortinet-rce-bug-is-actively-exploited-cisa-confirms/

That “3 million DDoS” story is a fairytale

BleedingComputer confirmed with FortiNet that it’s a hypothetical situation. The original article authors say the interview presented it as real.

Major journalistic failure all round, aside from BleedingComputer

3m smart toothbrush DDoS is false

https://www.bleepingcomputer.com/news/security/no-3-million-electric-toothbrushes-were-not-used-in-a-ddos-attack/