A sprawling campaign against FortiGate and GlobalProtect devices exposed tens of thousands of credentials, as CISA raced to flag actively exploited bugs in Arista, Collabora and PHP.
Armory Castle exploited a critical BeyondTrust flaw since late August, part of a week defined by nine actively exploited bugs across major enterprise vendors.
A wave of critical flaws in SonicWall, Citrix, Atlassian and Cisco gear is being actively exploited this week, with attackers moving within hours of disclosure.