Explore

Rapid ReadRapid Read
Fortinet Users Report Firmware Information Unavailable After Fortigate v7.6.8 Upgrade

Fortinet Users Report Firmware Information Unavailable After Fortigate v7.6.8 Upgrade

Users of Fortinet's Fortigate 60F devices are encountering an issue where firmware information becomes unavailable after upgrading to version 7.6.8. Specifically, the 'Firmware info unavailable' message appears under the 'Firmware & Registration → Upgrade status' section of the device interface. This problem has been reported by users in the Fortinet Community forum, indicating a potential bug or display issue within the new firmware version. The core of the problem appears to be a missing ID in the firmware upgrade matrix, which prevents the system from properly displaying the firmware details.
Rapid ReadRapid Read
FortiGate-VM Experiences High CPU Consumption with Security Profiles Enabled on Proxmox

FortiGate-VM Experiences High CPU Consumption with Security Profiles Enabled on Proxmox

A technical issue has been identified where FortiGate-VM instances running on Proxmox experience high CPU utilization, reaching approximately 99%, when security profiles are enabled on firewall policies. This occurs even with minimal or no traffic passing through the firewall. Conversely, disabling these security profiles causes the CPU utilization to return to normal levels. The root cause has been traced to the FortiGate-VM being configured with the KVM64 virtual CPU model. This specific CPU model does not expose the SSE4.2 instruction set, which is a requirement for Hyperscan, a technology used by FortiGate for security inspection features. The absence of this instruction set forces the system to use less efficient processing methods, leading to the observed high CPU consumption.
Rapid ReadRapid Read
Chinese APT Group SilentAir Exploits Telco Infrastructure for Covert Espionage in Six Countries, Including Taiwan

Chinese APT Group SilentAir Exploits Telco Infrastructure for Covert Espionage in Six Countries, Including Taiwan

A newly identified Chinese advanced persistent threat (APT) group, SilentAir, has been actively exploiting telecommunications infrastructure since early 2025. According to telco security firm ENEA, SilentAir is planting backdoors within telco networks to execute malicious SS7 and Diameter commands. These commands enable the group to collect device data, track subscriber locations, and intercept calls and SMS traffic. While SilentAir's SS7/Diameter attacks have been detected in six countries, the majority of its targets have been Taiwanese telcos and their subscribers. In some instances, the group has also targeted high-value individuals, such as political figures and government officials. SilentAir is noted for its sophisticated and covert espionage activities, operating with a stable presence in hacked networks through its malware. The group's operations have shown some overlap with another Chinese APT, Liminal Panda, in terms of network presence, though only SilentAir has been observed using SS7 and Diam...
TrendlineTrendline
VMware Enhances Private Cloud Security with New Air-Gapped Deployment for vDefend

VMware Enhances Private Cloud Security with New Air-Gapped Deployment for vDefend

VMware Enhances Private Cloud Security with New Air-Gapped Deployment for vDefend
TrendlineTrendline
Oracle to Deprecate Password-Based Authentication for Fusion Integrations by March 2027

Oracle to Deprecate Password-Based Authentication for Fusion Integrations by March 2027

Oracle to Deprecate Password-Based Authentication for Fusion Integrations by March 2027
Rapid ReadRapid Read
SilentAir Hackers Intercept Calls and SMS from Mobile Networks, Targeting High-Profile Figures

SilentAir Hackers Intercept Calls and SMS from Mobile Networks, Targeting High-Profile Figures

A previously unknown threat actor, tracked as SilentAir by telecom software and cybersecurity company Enea, is actively intercepting phone calls and text messages by compromising mobile operator infrastructure. Enea assesses with high confidence that SilentAir is a new state-level actor, with Taiwan being its primary target. The hackers launch signaling attacks, primarily over SS7 and sometimes Diameter protocols, from hijacked network nodes within mobile operators. These attacks reroute a target's incoming calls and SMS messages through the compromised node, allowing the hackers to harvest subscriber details. While location tracking is also possible, it constitutes a smaller portion of their activity. SilentAir also sends 'silent SMS messages' that do not appear on the recipient's phone, likely to verify the success of earlier interception attempts. Enea has been monitoring these attacks since early 2025, with evidence suggesting activity predates this period. The hijacked nodes are located in at least si...
Rapid ReadRapid Read
German Drone Manufacturer Quantum Systems Reports Cyberattack by Hostile Actors

German Drone Manufacturer Quantum Systems Reports Cyberattack by Hostile Actors

German drone manufacturer Quantum Systems, based in Gilching, announced that it was subjected to an active cyberattack by 'hostile actors' at the end of October 2026. The company's IT and security teams, in collaboration with authorities, successfully contained the threat. Following the incident, Quantum Systems reported it to relevant authorities as per regulatory obligations. Crucially, the company stated that there is 'no risk in operating Quantum Systems’ unmanned systems for the end users and the operators.' This assurance led to the German military's drones, which had been grounded as a precaution, resuming flight operations by November 13, 2026, as reported by Reuters. The investigation into the cyberattack is ongoing, involving state authorities and internal and external cybersecurity experts. While the company confirmed the attack and its containment, it has not disclosed the identity of the attackers, specific products affected, data stolen, or the number of systems compromised.
TrendlineTrendline
Italian Regulator Fines Meta $887 Million for Unauthorized Access to Android User Photos

Italian Regulator Fines Meta $887 Million for Unauthorized Access to Android User Photos

Italian Regulator Fines Meta $887 Million for Unauthorized Access to Android User Photos
TrendlineTrendline
Splunk Guides Users on SIEM Architecture Diagram Creation for Enhanced Log Source Management

Splunk Guides Users on SIEM Architecture Diagram Creation for Enhanced Log Source Management

Splunk Guides Users on SIEM Architecture Diagram Creation for Enhanced Log Source Management
Rapid ReadRapid Read
North Korea's Lazarus Group Targets U.S. Servers in Global Cyberattack Campaign

North Korea's Lazarus Group Targets U.S. Servers in Global Cyberattack Campaign

The North Korea-linked hacking group Lazarus has been identified targeting 49 servers in the United States as part of a broader cyberattack campaign. This campaign exploits security vulnerabilities in the PHP programming language, specifically remote code execution (RCE) vulnerabilities (CVE-2026-109618, CVE-2026-109619) in PHP core running on Windows operating system environments. According to global threat intelligence firm CYFIRMA, the Lazarus ecosystem attackers used these vulnerabilities to target 581 servers globally between the 25th and 29th of last month. Of the 216 primary targets confirmed across 10 countries, the United States had the highest number of targeted servers. The attackers scouted targets in a closed online channel, specifically mentioning U.S. internet protocol (IP) ranges as 'quite promising' before launching full-scale attacks. The targeted sectors include government agencies, finance, telecommunications, and critical infrastructure providers.
Rapid ReadRapid Read
U.S. Agencies Intensify Quantum Computing Validation Efforts Amid 'Put Up or Shut Up' Moment

U.S. Agencies Intensify Quantum Computing Validation Efforts Amid 'Put Up or Shut Up' Moment

Federal agencies in the U.S. are significantly increasing their investments and validation efforts in quantum computing, signaling a critical phase for the technology. The Special Competitive Studies Project (SCSP) released a preliminary report from the Commission on U.S. Quantum Primacy, acknowledging the transformative potential of quantum computing in fields like chemistry, materials science, and drug discovery, despite current technical constraints. Deputy Secretary of Commerce Paul Dabbar announced a $2 billion investment with nine companies to accelerate U.S. leadership in quantum computing and committed the Commerce Department to be an early adopter of post-quantum cryptography. Concurrently, the Defense Advanced Research Projects Agency (DARPA) is entering the final stage of its Quantum Benchmarking Initiative, aiming to determine the feasibility of developing an 'industrially useful' quantum computer by 2033. This third phase involves companies working with DARPA to verify and validate the design ...
TrendlineTrendline
SMBs Face Critical Technology Upgrades in 2027 Driven by Windows 10 End-of-Life and Emerging Tech

SMBs Face Critical Technology Upgrades in 2027 Driven by Windows 10 End-of-Life and Emerging Tech

SMBs Face Critical Technology Upgrades in 2027 Driven by Windows 10 End-of-Life and Emerging Tech