Stanislav Stoychev

FortiGate Devices Under Increased Attack: What Organizations Need to Know Over the past several months, Fortinet customers have faced a series of security incidents involving FortiGate firewalls. Recent campaigns have demonstrated how quickly threat actors can move from initial access to full administrative control of a device, often creating unauthorized accounts, modifying firewall configurations, and establishing persistent access before organizations realize they have been compromised....

Recent Linux LPE vulnerabilities highlight how limited telemetry delays detection and response. Linux systems sit at the center of modern infrastructure. They run production workloads, cloud platforms, development environments, and critical internal services. Because of that, they are often seen as stable and trustworthy by default. Recent Linux privilege escalation vulnerabilities, including Fragnesia (CVE-2026-46300), Dirty Frag (CVE-2026-43284, CVE-2026-43500), and Copy Fail...

The visibility problem we keep running into Most SIEM deployments follow a familiar pattern: collect logs, apply rules, generate alerts. That approach works, but it starts to break down in one area we regularly see during investigations - telling the difference between legitimate activity and attacker behavior when both look the same. Attackers are no longer relying on obviously malicious tools. They use valid credentials, built-in admin utilities, and approved access paths. From a logging...