Discover how the PivotC2 FortiGate RAT uses CVE-2025-25249 exploitation to harvest credentials and tunnel traffic across corporate network environments.
@securityonline.bsky.social
@securityonline.bsky.socialDiscover how the PivotC2 FortiGate RAT uses CVE-2025-25249 exploitation to harvest credentials and tunnel traffic across corporate network environments.
@stemshop.bsky.social🔴 Fortinet CVE-2025-25249 under active attack
Attackers are exploiting the Fortinet flaw to deploy PivotC2. Researchers found 30,000+ targeted IPs and 178 confirmed infected devices.
#CVE #CVE202525249 #Fortinet #FortiGate #PivotC2 #CyberSecurity
@threadlinqs.bsky.socialForge a SAML reply, skip the password - FortiCloud SSO bypass hands attackers instant FortiGate admin. https://intel.threadlinqs.com/threat/TL-2026-2486 #ThreatIntel #CVE_2024_32122 #CVE_2024_50562 #PivotC2
@threadlinqs.bsky.socialPivotC2 turns one UDP packet into full FortiGate takeover, then decrypts every VPN and LDAP secret onboard. https://intel.threadlinqs.com/threat/TL-2026-2431 #ThreatIntel #CVE_2025_25249 #PivotC2 #fortirunbin
@thedailytechfeed.comFortiGate firewalls hit by CVE-2025-25249 exploit deploying PivotC2 malware at scale. #Security #FortiGate #NodeJS #PivotC2 #CyberAttack #Vulnerability thedailytechfeed.com/major-fortig...
