Daily Brief
Exploited flaws and a school data breach
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CISA added a critical Fortinet FortiMail flaw to its exploited-vulnerabilities list after reports of active exploitation. The issue allows unauthenticated arbitrary file writes, so exposed mail gateways may already be at risk.
Check whether any FortiMail instances are internet-facing, then confirm the fix is applied or isolate the system until it is patched.
Frontline Education breach exposes school district employee data
Frontline Education is notifying school districts after attackers used a vulnerability in third-party software to access its systems and steal employee data, including Social Security numbers. It is a reminder that supplier flaws can become a direct data exposure for customers.
Review third-party access paths to your data and confirm you can identify which suppliers hold employee records and how you will be alerted to a breach.