Threats & CVEs

Active vulnerabilities, advisories, and threat intelligence — filtered for IT practitioners.

Severity:

Vendor:

Period:

identity

2 stories· filtered

ANALYSISHIGHMar 5, 2025

Scattered Spider's Social Engineering Playbook: How They Bypass MFA and Help Desks

Scattered Spider (UNC3944) continues to compromise Fortune 500 companies by impersonating employees to IT help desks and exploiting SIM swapping — even after MGM and Caesars breaches drew federal attention.

Phishing Identity & Access+1 more

CVECRITICALCVE-2024-55591Jan 14, 2025

FortiOS Auth Bypass (CVE-2024-55591) Massively Exploited — Rogue Admin Accounts Created

Fortinet's critical authentication bypass in FortiOS and FortiProxy management interfaces is being actively exploited at scale, with attackers creating hidden super-admin accounts and pivoting to internal networks.

Fortinet FortiGate+3 more+1