Suspected Chinese hackers exploit vulnerability in Fortinet devices

Suspected Chinese hackers have been targeting a European government entity and African managed service provider with new custom malware.

According to a report released by Mandiant on Thursday, hackers exploited a recently patched vulnerability — CVE-2022-42475 — in FortiOS, an operating system developed by U.S. cybersecurity company Fortinet, as a zero-day.

The exploitation occurred as early as October 2022, before the bug was fixed. In January, Fortinet warned its customers that hackers were using this vulnerability to target government networks. …

bug chinese chinese hackers customers cve cve-2022-42475 cybersecurity cybersecurity company devices exploit exploitation exploited fortinet fortios government hackers january malware managed managed service provider mandiant october operating system report service service provider system targeting vulnerability zero-day