TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

GigaOm

When Patching Isn’t Enough

Howard Holton · 2025-04-17 · Read original ↗

ATT&CK techniques detected

2 predictions
T1190Exploit Public-Facing Application
80%
", file system audits, and access control updates. we ’ ve also embedded long - term controls to monitor for persistence tactics like this in the future. key takeaway for leadership : this isn ’ t about one vendor or one cve. this is a reminder that patching is only one step in a …"
T1190Exploit Public-Facing Application
39%
"compromise and act accordingly. the real lesson we tend to think of patching as a full reset. it ’ s not. attackers today are persistent. they don ’ t just get in and move laterally – they burrow in quietly, and stay. the real problem here wasn ’ t a technical flaw. it was a blin…"

Summary

Executive Briefing What Happened: A stealthy, persistent backdoor was discovered in over 16,000 Fortinet firewalls. This wasn’t a new vulnerability – it

The post When Patching Isn’t Enough appeared first on Gigaom.