Cybercrime Alert

We provide a wealth of publications by PwC South Africa providing insights and alerts on the latest trends in cybercrime. Through our industry knowledge and experience on engagements, our insights assist businesses to identify threats that might impact their business with the recommended safeguards.

In this alert:

FortiGate, FortiManager zero-day exploitation

From early October 2024, various posts on social media have been informing the public about this vulnerability, with Fortinet publishing a statement and advisory on 24 October 2024, allocating CVE-2024-47575 to the vulnerability. Between 13 and 23 October, security researchers conducting open-source intelligence searches determined that at least 60,000 internet accessible instances of the FortiManager portal were vulnerable to this flaw. In addition to this, another critical vulnerability affecting FortiGate firewalls CVE-2024–23113 was reported. As of 15 October 2024, over 87,000 internet connected firewalls were still vulnerable to this flaw.

Download the latest alert Cybercrime Alert: FortiGate, FortiManager zero-day exploitation

A critical vulnerability has been discovered on multiple versions of FortiManager. The vulnerability allows an attacker to remotely execute malicious code.