Attackers are exploiting a Fortinet FortiOS flaw to infect VPN devices with PEERSTITCH malware, giving them a way to stay inside affected networks. The article says the malware is deployed through a FortiOS vulnerability affecting tagged VPN sessions and can bypass security checks on those sessions. The report points to in-the-wild exploitation against FortiGate systems, but the provided text does not include a CVE number or confirmed affected versions.
Why it matters: Organizations using FortiGate or FortiOS-based VPN infrastructure may be at risk of silent network compromise, not just a crash or failed login. Defenders should urgently identify the specific FortiOS issue, review Fortinet guidance, patch affected devices, and hunt for signs of PEERSTITCH or suspicious VPN session activity.
info@thehackernews.com (The Hacker News)
2026.10.16
100% relevant
This article appears to establish a distinct FortiOS exploitation-and-malware story that is not the same underlying event as the FortiGate/FortiOS stories already tracked.
← Back to all stories