High Known exploited Patch available
Fortinet flaws used to plant hidden malware on firewalls
Industrial CyberFortinet, Palo Alto Networks · telecommunicationsCVE-2024-47575, CVE-2025-61624
What happened. Unit 42 found attackers exploited FortiManager flaw CVE-2024-47575 at a telecoms managed service provider in September 2024, stealing data tied to over 500 FortiGate firewalls. They also used FortiOS flaw CVE-2025-61624 to deploy Peerstitch, malware that runs in memory.
Who is affected. Fortinet FortiManager, FortiGate and FortiOS users. A telecommunications managed service provider was hit; its clients' networks were exposed, though intrusions into them were not confirmed.
What to do. Check whether you run FortiManager or FortiOS, and whether CVE-2024-47575 and CVE-2025-61624 are patched in your environment.
Source: Industrial Cyber (opens industrialcyber.co)
More on Fortinet Palo Alto Networks Telecommunications CVE-2024-47575 CVE-2025-61624