MiTM attack

CVE-2017-7344 Fortinet FortiClient Windows privilege escalation at logon

On: December 25, 2017

In: Vulnerabilities

A setting, disabled by default, enables FortiClient on the logon screen to allow users to connect to a VPN profile before logon. An attacker, with physical, or remote (e.g. throughRead More →

US-CERT: Security Products That Perform HTTPS Interception Weaken Security

On: March 18, 2017

In: Vulnerabilities

In an advisory sent to enterprises across the US, the Department of Homeland Security’s US-CERT group is warning that security products which perform HTTPS interception might weaken a company’s overallRead More →