Critical Vulnerabilities in FortiGate Firewalls Exploited by Attackers

Today, cybersecurity professionals are on high alert following reports of active exploitation of multiple vulnerabilities in FortiGate Next-Generation Firewalls. Three high-severity flaws, specifically CVE-2025-59718 and CVE-2025-59719, allow unauthenticated attackers to gain access to enterprise systems, potentially compromising sensitive data and disrupting operations. These vulnerabilities stem from improper cryptographic verification, making them particularly dangerous. The Cybersecurity and Infrastructure Security Agency (CISA) has added them to its Known Exploited Vulnerabilities catalog, establishing urgent remediation deadlines for affected organizations. This incident underscores the critical need for robust firewall security and proactive vulnerability management in today's threat landscape.

Also In Security Today

Microsoft Patch Tuesday Updates: Microsoft released security updates on March 11, 2026, addressing 84 vulnerabilities, including two critical zero-day flaws in Office and SQL Server. Organizations are urged to apply these patches immediately to mitigate risks. Source

Data Breach at Shinhan Card: A cyberattack on South Korea's Shinhan Card has exposed sensitive data of 192,000 merchants, raising alarms about the security of financial data in the region. Source

Ransomware Attacks Surge: Recent reports indicate a surge in ransomware attacks targeting healthcare organizations, with attackers exploiting weaknesses in legacy systems. Organizations are advised to review their incident response strategies to counteract this growing threat.

Analyst's Take

Today's news highlights the persistent vulnerabilities within widely used software and systems, particularly in firewall technology. Organizations must prioritize patch management and vulnerability assessments to defend against these threats. The ongoing exploitation of FortiGate firewalls serves as a reminder of the critical importance of implementing strong security measures and staying informed about the latest vulnerabilities. As attackers become increasingly sophisticated, security professionals need to adopt a proactive approach to safeguard their environments against potential breaches.