Fortinet ships an urgent hardening release today for FortiOS, FortiManager and FortiAnalyzer with critical fixes found by frontier-AI testing; advisories wait until Nov 10
Fortinet CISO Carl Windsor says a coordinated set of updates for FortiOS, FortiManager and FortiAnalyzer lands on Oct 22, following FortiMail and FortiAuthenticator releases on Oct 21. They include critical and high-severity fixes, some found through Fortinet's frontier-AI-assisted testing (with Anthropic, OpenAI, Google and SpaceX). Fortinet asks customers to treat it as a priority change, not routine maintenance, because patch diffing with AI can turn fixes into exploits in hours or days. Public advisories won't appear until Patch Tuesday, Nov 10.
- FortiOS: 8.0.2, 7.6.8, 7.4.13, 7.2.14 or later.
- FortiManager / FortiAnalyzer: 8.0.2, 7.6.8, 7.4.12, 7.2.13 or later.
- FortiMail: 8.0.2, 7.6.7, 7.4.9 (7.2 must move to 7.4+). FortiAuthenticator: 8.0.4, 6.6.11.
- FortiSASE is updated automatically; FortiManager Cloud may need a manual update.
Do now: patch internet-facing FortiGates and any FortiManager first, back up configs, and until then restrict HTTPS/SSH admin to trusted IPs and keep FortiManager off the internet. Watch for unexpected admin logins or config changes before and after patching.