Fortinet confirms exploitation of previously patched FortiCloud SSO flaw.

This intelligence roundup reports active exploitation of a critical FortiCloud SSO vulnerability (CVE-2025-59718) enabling unauthenticated SAML bypass and persistent account creation, a large alleged Under Armour data breach impacting ~72M accounts, Check Point’s analysis that the VoidLink Linux malware was likely developed largely with AI, and law enforcement raids targeting suspected Black Basta ransomware affiliates.