PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

A suspected advanced threat actor has been exploiting a path traversal flaw in Fortinet FortiOS, tracked as CVE-2025-61624, to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The flaw also affects FortiPAM, FortiProxy, and FortiSwitchManager, according to The Hacker News.