Hackers exploit newly patched Fortinet auth bypass flaws

Critical Fortinet Vulnerabilities Actively Exploited CVE-2025-59718 & CVE-2025-59719 Executive Summary Threat actors are actively exploiting two critical-severity authentication bypass vulnerabilities affecting multiple Fortinet products. These flaws allow attackers to gain unauthenticated administrative access via FortiCloud Single Sign-On (SSO) and exfiltrate system configuration files, potentially enabling further compromise of enterprise networks. Fortinet disclosed these vulnerabilities on […]

5 Surprising Truths About Web Security I Learned From a National Standard

We use websites for everything. From checking our bank balance and paying bills to connecting with friends and reading the daily news, these digital platforms are woven into the fabric of our lives. We trust them with our personal data, financial details, and private communications, yet we rarely consider the immense, multi-layered effort required to […]

Thailand’s Website Security Standards 1.0: A Comprehensive Guide

This official publication in the Royal Thai Government Gazette presents the “Standards for Website Security Version 1.0,” issued by the National Cyber Security Agency (NCSA) pursuant to the Cybersecurity Act B.E. 2562 (2019). The standards establish minimum security requirements for all websites connected to the internet, encompassing government agencies, critical information infrastructure entities, and private-sector […]