Attackers exploit FortiGate devices to access sensitive network information

Multiple high-impact cyber incidents and campaigns reported: attackers are exploiting FortiGate devices (vulnerabilities or weak credentials) to steal configuration files containing service-account credentials and network details; Russia-linked APT28 has conducted long-term espionage against Ukrainian forces using BEARDSHELL and COVENANT malware; threat actors are mass-scanning Salesforce Experience Cloud sites with a modified AuraInspector to exploit misconfigurations and exfiltrate data; CISA added multiple flaws (including Ivanti EPM, SolarWinds, and Omnissa Workspace One) to its Known Expl