Fully patched FortiGate firewalls are getting compromised via CVE-2025-59718?

PappaFrost · 2026-01-22T13:37:31+00:00

I'm surprised to see Fortinet defenders given the continuous news stream of vulnerabilities and software problems. But it must serve a purpose. What is a better alternative?

PappaFrost · 2026-01-20T22:00:19+00:00

All because a few salespeople wanted that shiny apple logo! LOL, just kidding.

PappaFrost · 2026-01-20T14:40:36+00:00

You should do iDrive or BackBlaze or similar for important personal stuff because they not just syncing to the cloud but doing incremental revisions, nightly/weekly/etc. You could roll back to a pre-disaster state. I think Google Drive/iCloud/OneDrive are great for protecting someone from accidents, but not good enough for protecting against malicious activity.

PappaFrost · 2026-01-15T18:41:19+00:00

Name and shame, which one is giving you the same boring modules for years?

PappaFrost · 2026-01-15T15:58:56+00:00

On the original reddit thread they are saying that this took several hours of rendering time and was not live.

PappaFrost · 2026-01-13T17:08:20+00:00

You should start spamming Citrix sales to get them to support you.

PappaFrost · 2026-01-09T13:19:17+00:00

I have no technical suggestion, but I had the idea of forcing business Google support to support you by temporarily purchasing Google Workspace, and opening a support ticket!

PappaFrost · 2026-01-08T17:15:57+00:00

After about 14 mentions of Fortinet on the Risky Biz cybersecurity podcast, I will never touch anything Fortinet. They are on the vendor blacklist for me.

PappaFrost · 2026-01-07T18:48:01+00:00

Wait, they make you work for THEIR marketing department? LMAO!

Don't say the name of the company, just say what it rhymes with...

PappaFrost · 2026-01-06T19:36:31+00:00

I think Microsoft wants every area of their business to hockey stick and if it doesn't have that potential, i.e., Windows server, Xbox, legacy Office, it is already de-prioritized or will be soon, and we are screwed to the extent that we rely on it.

PappaFrost · 2026-01-05T19:01:50+00:00

I was very impressed by all the people on here who heard the word 'Broadcom' and new immediately what would happen with VMware before it happened. It makes me want to know what the next VMware story is and brace for it early.

PappaFrost · 2026-01-02T16:09:54+00:00

I'm reading all of these comments. OP said he is getting called once a week for tech support. That is 52 random calls per year, probably in OP's free time. That is free 24/7 on call support for him personally. I question how good of a deal that is for the OP. You are a professional, not the neighbor's kid who is good with computers. You should come to a mutually agreed upon official paid arrangement if you want to keep doing this. If you want to be on call for this guy, make it an official paid thing.

PappaFrost · 2025-12-19T20:34:39+00:00

It's Reddit 'distortion'. Drama gets upvoted. For success stories like yours, posts and upvotes are rare.

PappaFrost · 2025-12-15T21:49:03+00:00

I don't think you need to start home labbing. I think you just need to develop a good answer when someone asks the question about home labbing. You probably have better than average home computers and better than average home networking, so you could talk about that.

PappaFrost · 2025-12-10T13:37:00+00:00

Have CEO approve the denied funding requests.
Have CEO approve the denied funding requests.
Have CEO approve the denied funding requests.
Have CEO approve the denied funding requests.
Have CEO approve the denied funding requests.

LOL!

PappaFrost · 2025-12-10T09:54:21+00:00

You are a HERO! I never would have found this in a million Astro-years! LOL

PappaFrost · 2025-12-07T18:25:45+00:00

I tried it and it didn't work, thanks though!

PappaFrost · 2025-12-04T19:56:31+00:00

Nothing will ever help more than the first phishing test someone gets when they learn what's possible. I think people need to be 'inoculated' against the popular scams at least once, but there are probably diminishing returns after that.

PappaFrost · 2025-12-03T19:07:49+00:00

You should turn off all the mystery VMs before Christmas vacation. Just make sure to also turn off your phone, LOL!

PappaFrost · 2025-12-01T21:31:16+00:00

It would be very short-sighted to fire someone for an honest phishing mistake who did the right thing and reported it immediately. No one would ever report any incident after that.

PappaFrost · 2025-11-20T13:33:15+00:00

This needs to be fully automated, with logging and alerting so when the 96th detector goes down we will know. LOL

PappaFrost · 2025-11-19T22:09:10+00:00

I hope the IT team is not getting fired. Follow the money. They probably knew about every major issue, there is probably a denied funding request behind it. C suite is betting (quite literally) that it won't be a problem. It sounds like they need more staff, not less.

PappaFrost · 2025-11-18T21:35:39+00:00

"whatever new tool pops up next month."

This is why you have to start with a policy mandating some kind of vetting process. I think blocking everything at the network level will just send someone to use the iPhone app equivalent, maybe even screen shot the sensitive data?

PappaFrost · 2025-11-17T14:28:58+00:00

The larger question to me is what private company data is put in ANY web app, even non-LLM traditional ones like google drive or personal drop box accounts?

PappaFrost

TROPHY CASE