Fortinet flaw reportedly used to deploy stealthy FortiGate implant in telecom hack

SecurityWeek, citing Palo Alto Networks, reports that an actor tracked as UNC5820 exploited a FortiManager flaw in an attack on a telecommunications organization and took a configuration archive with details on more than 500 managed FortiGate firewalls. Palo Alto Networks says the actor also used a separate path-traversal flaw to deploy PeerStitch, a FortiGate implant that runs in memory and communicates through traffic generated by legitimate processes.