Daily Brief
active exploits and access compromise
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Fortinet says a critical FortiMail flaw is being actively exploited in zero-day attacks to run unauthorised code or commands on vulnerable devices. It matters because FortiMail sits on the email boundary, so exploitation can give attackers direct control of a defensive control point.
Check FortiMail versions against Fortinet’s advisory and prioritise patching or mitigation on any internet-facing device this week.
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab patched a critical AI Gateway flaw that could let a logged-in user with Duo Agent Platform access run commands on the gateway on self-hosted installations. It matters for organisations running their own gateway because the issue affects a service that connects GitLab to AI models.
Identify any self-hosted GitLab AI Gateway instances and apply the fixed versions 19.2.4, 19.3.2 or 19.4.1 without delay.