Top all-time · #1303
Fortinet
Company blog · fortinet.com/blogsecurity
Fortinet is the company blog at fortinet.com, writing about security. Since 2014, 55 different Hacker News readers have linked it 58 times, most often “Phish-Free PayPal Phishing”. No feed was found, so read it on the site itself.
Rarely recommended · 0 of 35 sampled comments recommend it?
Why HN links it
Fortinet threat-research blog posts and cyberglossary definition pages. HN commenters link them as sources or term definitions in threads on malware, phishing, VPNs and security concepts.
Summarised by Claude from a sample of 35 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Fortinet delivers cybersecurity everywhere you need it. We secure the entire digital attack surface from devices, data, and apps and from data center to home office.
Most-linked posts?
- Phish-Free PayPal Phishing3 people · 3 mentions · first linked 2025-01-09
- Fortinet Releases Security Hardening Release for Multiple Products2 people · 2 mentions · first linked 2026-10-21
- /blog/threat-research/one-bit-to-rule-them-all-bypassing-windows-10-protections-using-a-single-bit2 people · 2 mentions · first linked 2022-08-03
- Leaking Browser URL/Protocol Handlers2 people · 2 mentions · first linked 2020-12-04
- Malicious Packages Hidden in NPM2 people · 2 mentions · first linked 2023-10-03
- /resources/cyberglossary/transparent-firewall2 people · 2 mentions · first linked 2023-03-06
What Hacker News says?
Nope, I read the manufacturers published specifications for their equipment and looked up the pricing on publicly accessible websites. https://www.paloaltonetworks.com/products/product-selection https://www.fortinet.com/products/product-compare?cat=ngfw And you can get pricing from any VARs website such as CDW.com Good try though.
Comment linking /products/product-compare?cat=ngfw
on “Palo Alto Networks sends cease-and-desist letter to take down review videos”Submitted The Growing Threat of Malware Concealed Behind Cloud Services as a story · 30 points
HN discussionThe OpenSSH/XZ exploit from a year or so ago was actually a systemd exploit[1], fun fact. Looking back on the time I spent in systemd land, I don't miss it at all. My system always felt really opaque, because the mountain of understanding systemd seemed insurmountable. I had to remember so much, all the different levers required to drive the million things systemd orchestrated... and for very little effect. I really…
Comment linking /resources/articles/xz-utils-vulnerability
on “A Love Letter to FreeBSD”Submitted Phish-Free PayPal Phishing as a story · 6 points
HN discussionDo you have more information on that? Hadn't read anything about the CS kernel module running arbitrary code. Was it a factor in the crash? 'course, Microsoft also put turing complete scripting in ring 0 years ago for performance reasons (TTFs - XML/HTML parsing and GUI rendering too - to beat other OSes apparently) and that certainly did lead to exploited vulnerabilities... https://googleprojectzero.blogspot.com/20…
Comment linking /blog/threat-research/one-bit-to-rule-them-all-bypassing-windows-10-protections-using-a-single-bit
on “Microsoft technical breakdown of CrowdStrike incident”Submitted Inside the Mirai-Based Gayfemboy Botnet Campaign as a story · 4 points
HN discussionGoogle "is a cookie an API key" and the first result is this: https://news.ycombinator.com/item?id=39094541 Which says: > A login cookie isn't an API key. If the first result is authoritative then I guess that sorts it. But your link was from this site: https://www.fortinet.com/resources/cyberglossary/api-key Which is confusing because it also says: > API keys cannot be used for secure authorization because they are…
Comment linking /resources/cyberglossary/api-key
on “U.S. National Park Service API”Submitted Fortinet Releases Security Hardening Release for Multiple Products as a story · 3 points
HN discussionOr, worse, I find that most of these are real links from real paypal. https://www.fortinet.com/blog/threat-research/phish-free-pay...
Comment linking /blog/threat-research/phish-free-paypal-phishing
on “Github scam investigation: Thousands of “mods” and “cracks” stealing data”Submitted Lacework to Be Acquired by Fortinet as a story · 3 points
HN discussionDeep Packet Inspection: https://www.fortinet.com/resources/cyberglossary/dpi-deep-pa...
Comment linking /resources/cyberglossary/dpi-deep-packet-inspection
on “Tunneling Wikipedia through WhatsApp to (maybe?) get around WiFi restrictions”Submitted Supply Chain Attack Using PyPI Packages “Colorslib”, “Httpslib”, and “Libhttps” as a story · 3 points
HN discussionSure. Kinda like how storing web templates in files is totally dependent on the people who upload them not putting crypto miners in the linked javascript(s) [1]. Or totally dependent on PAM not having a vulnerability [2]. Or totally dependent on SSH not having a vulnerability [3]. In terms of libraries and utilities I can give PAM and SSH a pass for fixing these things long ago. In the case of restricting a customer…
Comment linking /blog/threat-research/the-growing-trend-of-coin-miner-javascript-infection
on “Are software engineering “best practices” just developer preferences?”Submitted Over 72% of network traffic is encrypted as a story · 3 points
HN discussionAlso F5 or Citrix: some of their core security products had 90s-style C exploits and other signs of development practices well behind the times - roughly at the level of going to surgery and seeing your surgeon not washing their hands in the bathroom. https://www.cisa.gov/guidance-addressing-citrix-netscaler-ad... https://www.mandiant.com/resources/blog/session-hijacking-ci... https://www.fortinet.com/blog/threat-re…
Comment linking /blog/threat-research/defending-against-critical-f5-vulnerabilities
on “What we know about the xz Utils backdoor that almost infected the world”Submitted Critical Fortinet Security Release as a story · 2 points
HN discussionIf you go to the pool website with the address specified on the botnet you can see how much it was mined. The main article [1] linked on the news said: > The actor has been able to mine about 630 XMR to date, which at the current USD rate is more than $172,000 for just a little more than one year of activity. [1]: https://www.fortinet.com/blog/threat-research/yet-another-cr...
Comment linking /blog/threat-research/yet-another-crypto-mining-botnet.html
on “Backdoored images downloaded 5M times removed from Docker Hub”Submitted Notice of Recent Security Incident as a story · 2 points
HN discussionGemalto: http://www.gemalto.com/readers/tokens.html Safenet: http://www.safenet-inc.com/data-protection/authentication/ot... Fortinet: http://www.fortinet.com/products/fortitoken/200CD.html
Comment linking /products/fortitoken/200CD.html
on “Why we have to boycott RSA”Submitted Linksys HomeWRK for Business as a story · 2 points
HN discussionSSL is not going away, might as well forget TLS instead. https://www.fortinet.com/resources/cyberglossary/ssl-vpn
Comment linking /resources/cyberglossary/ssl-vpn
on “SSL Configuration Generator”Submitted Another Bitcoin Exchange Scam–This Time “Live” on YouTube as a story · 2 points
HN discussionSadly, that's yesterday news. See here: https://security.stackexchange.com/a/249484 > ... a newly discovered ransomware variant exhibits the ability to detect and compromise partitions (including hidden partitions), a behavior not thought to have been seen before in ransomware. with a link to original source: https://www.fortinet.com/blog/threat-research/newly-discover... quote from that link: > At the time of disco…
Comment linking /blog/threat-research/newly-discovered-function-in-darkside-ransomware-variant-targets-disk-partitions
on “WSL2 can now mount Linux ext4 disks directly”Submitted Threat Research: Leaking Browser URL/Protocol Handlers as a story · 2 points
HN discussion> Frankly this is absurd. What's absurd is Apple's software sending requests to random and entirely-unvetted servers without even so much as notifying the user, let alone obtaining consent. > Did you know that the file system of your computer contains your personal data, including files you save? Why yes, and that would just so happen to be the reason why I ain't exactly comfortable with closed-source software silen…
Comment linking /resources/cyberglossary/data-exfiltration
on “macOS is background scanning and following downloaded QR codes?”Submitted Leaking Browser URL/Protocol Handlers as a story · 2 points
HN discussionI haven't found any real implementations to test (I'd like to). But it seems Fortinet is making bold claims that, on the surface, feel like lip service thus far: https://www.fortinet.com/blog/business-and-technology/tls-is... Keep in mind this is just TLS1.3 and they make no claims around IETF QUIC / HTTP/3.
Comment linking /blog/business-and-technology/tls-is-here-what-this-means-for-you.html
on “Why We Love QUIC and HTTP/3”Submitted Unveiling the Weaponized Web Shell EncystPHP as a story · 1 points
HN discussionAnd "Defense In Depth" - the more layers that bad actors have to avoid/circumvent reduces the chance of their success. see https://www.fortinet.com/resources/cyberglossary/defense-in-...
Comment linking /resources/cyberglossary/defense-in-depth
on “Hackers use ZIP file concatenation to evade detection”Submitted Fortinet: Analysis of Threat Actor Activity as a story · 1 points
HN discussion
