When the Guards Become the Gate: Actively Exploited Flaws Hit the Devices That Protect Networks
The federal government's cyber defense agency just flagged two vulnerabilities that attackers are exploiting right now -- and both sit in the exact equipment organizations buy to keep attackers out. Fortinet firewalls and Arista's VeloCloud network-management software are gatekeeper technology: if you subvert the gatekeeper, you don't need to sneak past it. That inversion, not the individual bugs, is the story.
Bottom Line
Two actively exploited flaws in network gatekeeper technology made CISA's must-patch list, and the listing itself now carries quasi-regulatory weight across the private sector. The recurring lesson: the security and management layer of modern networks has become attackers' favorite entry point precisely because defenders trust it most. Organizations that treat KEV additions as optional reading are increasingly the ones explaining themselves after a breach.