Fortiweb Vulnerability

Fortinet, with significant delay, acknowledged a recently patched vulnerability after exploit attempts were seen publicly.

https://isc.sans.edu/diary/Honeypot+FortiWeb+CVE202564446+Exploits/32486

https://labs.watchtowr.com/when-the-impersonation-function-gets-used-to-impersonate-users-fortinet-fortiweb-auth-bypass/

https://fortiguard.fortinet.com/psirt/FG-IR-25-910?ref=labs.watchtowr.com

Flnger.exe and ClickFix

Attackers started to use the finger.exe binary to retrieve additional payload in ClickFix attacks

https://isc.sans.edu/diary/Finger.exe%20%26%20ClickFix/32492