InfoSecBulletin Cybersecurity for mankind

Fortinet has released fixes for a set of authentication flaws in its FortiWeb, FortiManager, and FortiClient products. It warns admins to update quickly because these systems are sensitive. The severe one, known as CVE-2026-26035, is found in FortiWeb’s login system. It has a CVSS score between 8.8 and 9.8 based …

A data theft plan is stealing information from anonymous users on Salesforce Experience Cloud and ServiceNow customer portals using special tools. The data theft campaign, called City-Forum by the software security company Reco, comes from one server that has attacked many groups around the world. These groups include phone companies, banks, …

Palo Alto Networks shared its security bulletin revealing 11 new issues that impact PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser. There is also a monthly update for Chromium. The patch batch covers flaws with information leaks, getting extra system rights, buffer overflow, skipping certificate checks, and bypassing …