Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software

Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected systems.
"An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiClientEMS may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted

https://thehackernews.com/2024/03/fortin...-sqli.html

DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack

A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software installers.
“During this campaign, users were lured using PDFs that contained Google DoubleClick Digital Marketing (DDM) open redirects that led unsuspecting victims to compromised sites hosting the Microsoft Windows SmartScreen bypass

https://thehackernews.com/2024/03/darkga...ently.html

Stellantis Continues to Drive Gender Equality Throughout Its Global Business


Ranked 33rd on the 2023 FTSE Diversity and Inclusion Index, an improvement of 55 spots year-over-year
30% of leadership positions


https://www.stellantis.com/en/news/press...l-business

Today’s Youth to Add Their Voices at the Second Annual Freedom of Mobility Forum


Students from three leading universities from three continents will guide debate topics by presenting research on three focus areas: technology, socia


https://www.stellantis.com/en/news/press...lity-forum

Heated Seats? Advanced Telematics? Software-Defined Cars Drive Risk

Carmakers are offering all kinds of over-the-air subscriptions and features, many of which benefit the businesses that use them. But this also opens up a wider attack surface for vehicle attackers.


https://www.darkreading.com/ics-ot-secur...drive-risk

Yacht Retailer MarineMax Files 'Cyber Incident' with SEC

The Florida-based boat purveyor's operations were seemingly minimally disrupted and "not material," but it's filing an SEC notice anyway.


https://www.darkreading.com/cyberattacks...cident-sec

ChatGPT Spills Secrets in Novel PoC Attack

Research is latest in a growing body of work to highlight troubling weaknesses in widely used generative AI tools.


https://www.darkreading.com/cyber-risk/r...enai-tools

Claroty Launches Advanced Anomaly Threat Detection for Medigate




https://www.darkreading.com/ics-ot-secur...r-medigate

Codezero Raises $3.5M Seed Funding From Ballistic Ventures to Secure Multicloud Appl




https://www.darkreading.com/cloud-securi...evelopment

Claroty Team82: 63% of Known Exploited Vulnerabilities Tracked by CISA Are on Health




https://www.darkreading.com/ics-ot-secur...n-networks