InfoSecBulletin Cybersecurity for mankind
Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the deployment of a stealthy malware implant known as PEERSTITCH.
According to the investigation, attackers exploited CVE-2024-47575 in FortiManager to steal configuration files, credentials, cryptographic material, and network information associated with more than 500 managed FortiGate firewalls. They later exploited CVE-2025-61624, a FortiOS privilege-escalation vulnerability, to deploy PEERSTITCH.
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
Multiple European supermarket fridges got hacked: Temperatures reached high as 55°C
Apple Warns 99 Countries iPhone Users of Mercenary Spyware Attacks
Daily Cyber security update for 31.10. 2026
The malware operates directly in memory, injecting malicious code into FortiOS system processes to bypass security checks and maintain covert access. By avoiding persistent files on disk, opening no listening ports, and abusing legitimate system processes for communications, PEERSTITCH makes detection significantly more difficult.
Researchers also observed attackers intercepting network traffic, establishing unauthorized VPN sessions, deploying backdoors, and attempting to conceal their activities by manipulating logs and removing malicious configurations.
Organizations should patch affected Fortinet systems, review FortiManager and FortiGate configurations for unauthorized changes, rotate potentially exposed credentials and cryptographic keys, and investigate suspicious administrative and VPN activity.
For the full report click here.
(Disclaimer: This report summary was prepared with the assistance of AI. While efforts have been made to ensure accuracy, any errors or omissions are unintentional.)
