CVE-2023-27997 Archives • Daily CyberSecurity

Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices

Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices

Do Son April 14, 2025

Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.

MirrorFace: Unmasking the Chinese Cyber Espionage Group Targeting Japan AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

MirrorFace: Unmasking the Chinese Cyber Espionage Group Targeting Japan

Do Son January 8, 2025

Discover the cyberattacks attributed to the MirrorFace group in Japan. Learn about their campaigns, targets, and the vulnerabilities they exploit.

Volt Typhoon: Chinese State-Sponsored APT Targets U.S. Critical Infrastructure Volt Typhoon APT group

Volt Typhoon: Chinese State-Sponsored APT Targets U.S. Critical Infrastructure

Do Son November 21, 2024

Uncover the critical details about Volt Typhoon APT group: a state-sponsored threat targeting US critical infrastructure sectors.

Earth Kasha Expands Operations: New LODEINFO Malware Hits Government and High-Tech Earth Kasha - LODEINFO

Earth Kasha Expands Operations: New LODEINFO Malware Hits Government and High-Tech

Do Son November 20, 2024

Learn about the latest LODEINFO malware campaign attributed to the Earth Kasha threat group, targeting government agencies and high-tech industries in Japan, Taiwan, and India.

2023’s Most Exploited Vulnerabilities: A Global Cybersecurity Advisory Fortinet patch bypass 2026, FortiGate SSO authentication exploit SharePoint Zero-Day, China APTs Exploited Vulnerabilities 2023

Fortinet patch bypass 2026, FortiGate SSO authentication exploit SharePoint Zero-Day, China APTs Exploited Vulnerabilities 2023

2023’s Most Exploited Vulnerabilities: A Global Cybersecurity Advisory

Do Son November 13, 2024

Discover the most exploited vulnerabilities of 2023 in a joint advisory by top cybersecurity agencies. Learn about the critical CVEs targeted by malicious actors.

CVE-2023-27997: Fortinet FortiGate SSL VPN Pre-Auth RCE Vulnerability

Do Son June 11, 2023

The flaw, CVE-2023-27997, is a heap-based buffer overflow bug. This bug, when exploited, can enable unauthenticated users to execute code