CyberSecurity News
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
AI summary
A suspected advanced threat actor is exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported malware known as PEERSTITCH. The malware is memory-resident and designed for ARM64 systems. The attack involves exploiting a path traversal flaw in the command line interpreter of FortiOS and other related products. This flaw is identified as CVE-2025-61624 and has a CVSS score of 5.4. The malware bypasses checks on tagged VPN sessions. The vulnerability could allow an attacker to access the system.
Vulnerabilities mentioned
This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.