Network Security News Summary for Monday September 18th, 2023

From SANS Internet Storm Center's Daily Network Security News Podcast Johannes B. Ullrich

MFA Issue; QNAP Patches; Keychain Passkey Access; Fortinet and vBulletin XSS When MFA isn't actually MFA https://retool.com/blog/mfa-isnt-mfa/ QNAP Patches https://www.qnap.com/en/security-advisories?ref=security_advisory_details Chrome able to use Apple Keychain Passkeys https://9to5google.com/2023/09/14/chrome-118-icloud-passkey/ Fortinet XSS https://fortiguard.fortinet.com/psirt/FG-IR-23-106 vBulletin XSS https://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c keywords: vbulletin; fortinet; xss; chrome; passkeys; keychain; qnap; mfa