highMalware
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses VPN Session Checks
Exploitation of CVE-2025-61624 allows unauthenticated path traversal to deliver memory-resident ARM64 malware
Cyber.TechVoid1 min read
Key Takeaways
- CVE-2025-61624 is a path traversal flaw in Fortinet's command line interpreter affecting FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager.
- Active exploitation observed to deploy PEERSTITCH, a memory-resident ARM64 malware strain.
- Attackers bypass security checks on tagged VPN sessions to deliver the payload.
Related Security News
highcyber attacks
Attackers Tampered with AOMEI Backupper Update Servers to Deliver Backdoor
Threat actors briefly modified files served by AOMEI Backupper's update infrastructure during five to ten minute windows between May and July 2026. Any system checking for updates during those intervals downloaded and executed a backdoor. The incident was reported by The Hacker News and attributed to activity monitored by Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis team.
The Hacker News1 min read
