Fortinet
Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. These questions come from the facts we hold.
Questions to ask IT
- Do we run Fortinet FortiManager and FortiOS, and which versions?
- Is any of it reachable from the internet?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 18 Nov?
Next steps
- Confirm whether this affects systems or suppliers in your estate
No technical write-up beyond the summary below yet.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- Unit 42 reports that Peerstitch malware was deployed through a FortiOS vulnerability that was exploited following a FortiManager compromise.
Read the original reportIndustrial Cyber(opens in a new tab)
Products and services involved
- Fortinet FortiManager98% match confidence
- FortiOS93% match confidence
Pulse
Last checked 28 Oct · Recheck overdue since 1 Nov 2026, 18:08 UK time · 1 quiet check collapsed
- Story19 Oct 2026, 14:07 UK time · 19 Oct
Linked reporting from Industrial Cyber (independent original reporter).
Read source (Industrial Cyber)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- Industrial CyberNews
Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise
- ProbableSummary fact75% confidence
Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise Industrial Cyber