[CVE-2026-25089]

June 18, 2026

• Fortinet FortiSandbox is under active attack via three critical bugs — CVE-2026-39813, CVE-2026-39808, CVE-2026-25089 (path traversal + privesc, CVSS 9.1) — with CERT.dk flagging the attacks for Nordic defenders. Upgrade immediately (The Register). · Vulnerabilities & Exploits

in ShinyHunters Burns a PeopleSoft Zero-Day Through Higher Ed as Copilot "SearchLeak" Shows AI Is the New Exfil Channel

June 17, 2026

• Fortinet FortiSandbox: three flaws under active exploitation, including path-traversal CVE-2026-39813 (CVSS 9.1), plus CVE-2026-39808 and CVE-2026-25089; SOCRadar reports ~30,000 exposed/compromised Fortinet firewalls. The Hacker News, SecurityWeek. · Vulnerabilities & Exploits (Actively Exploited)

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists