Nation-State Actors Infiltrate U.S. by Exploiting Zoho and Fortinet Flaws

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Multiple nation-state entities infiltrated a prominent U.S. aeronautics organization by capitalizing on vulnerabilities within Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, subsequently acquiring unauthorized entry and establishing persistence on compromised systems.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.