Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability ...

CISA added the flaw to its KEVs catalog as Fortinet warned that patches for most affected versions remain “upcoming,” even though vulnerable devices can no longer use cloud SSO until upgraded.

Laptops, phones, and random office Wi-Fi all end up pointing at the same place now: the cloud. That convenience comes with new weak spots, which is why so many security teams spend their days staring ...