Daily Brief
emergency PHP fixes and AI-driven website intrusions
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Researchers have released a proof-of-concept exploit for a critical Fortinet FortiSIEM flaw that can allow unauthenticated remote code execution. It matters because public exploit code lowers the bar for attackers against systems that are already patched or overdue for remediation.
Verify FortiSIEM exposure, confirm the patched version is installed, and prioritise any internet-facing instances for log review and containment.
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Attackers hijacked five OVHcloud CLI releases on GitHub and replaced the download archives with builds designed to steal secrets from disk. This matters because trusted software distribution channels can be abused to compromise developer systems and harvest credentials at scale.
Reinstall any affected OVHcloud CLI versions from a trusted source, check developer endpoints for secret exposure, and review GitHub account and release controls.