Software Engineer Intern

Fortinet achieves IEC 62443 certification across the FortiOS Product Family. One operating system, independently validated to IEC 62443 across three release lines and every FortiGate form factor, from the control center to the substation Industrial organizations rarely rely on just one type of network firewall. A utility may use high-capacity appliances in its control center, ruggedized units in substations, wireless-enabled devices at remote sites, and virtual firewalls in the cloud. Every enforcement point must meet the organization's security requirements, but verifying compliance across sites and models can be slow and costly. Today, Fortinet announced that the FortiOS Product Family has achieved IEC 62443 certification. The certification covers the FortiOS-powered FortiGate, FortiGate Rugged, FortiWiFi, and FortiGate virtual machine (VM) platforms. The family is certified to IEC 62443-4-2 Security Level 4 (SL4), the highest level the standard defines for components. It is built following a Secure Product Development Lifecycle (SPDL) certified to IEC 62443-4-1 Maturity Level 2 (ML2). For operational technology (OT), critical infrastructure (CI), and industrial automation and control systems (IACS), this provides a common, independently validated security foundation across the certified platforms and releases. One operating system, one certified foundation. The certification covers FortiOS v7.4.x, v7.6.x, and v8.x.x family across four platforms, including the product lines, hardware, and hosting models within its scope. | Platform | Typical Deployment | | FortiGate | Enterprise networks, data centers, and control centers | | FortiGate Rugged | Substations, plant floors, and other harsh environments or remote industrial sites | | FortiWiFi | Branch and remote sites that need integrated wireless | | FortiGate VM | Private cloud, public cloud, and virtualized environments | Family-level coverage enables organizations to standardize on a single validated platform across enterprise IT and industrial OT. Consistent policies, administrative controls, and certification evidence can reduce the effort required to support diverse sites and device types. Process and product, validated together. IEC 62443 is an international series of standards for securing industrial automation and control systems. Two of its parts apply directly to product suppliers, covering both secure development processes and component security capabilities. | Standard | What It Evaluates | Level Achieved | | IEC 62443-4-1 | How the product is built: the SDPL, from requirements and design through testing, issue handling, and updates | Maturity Level 2 (ML2) | | IEC 62443-4-2 | What the product does: the technical security capabilities implemented in the component | Security Level 4 (SL4) | IEC 62443-4-1 at ML2 demonstrates that Fortinet's secure development processes are formalized, documented, repeatable, and consistently applied across all eight practice areas of IEC 62443-4-1:2018. IEC 62443-4-2 at SL4 demonstrates that the certified product meets the most demanding security level defined for components in IEC 62443-4-2:2019. Together, these certifications provide asset owners with evidence of both the engineering discipline behind the product and the security capabilities of the product they put into service. Consistent certified capabilities across platforms. FortiOS is the foundation of the Fortinet AI-Native Security Fabric and the Fortinet OT Security Platform. The certification validates the capabilities that OT and CI organizations rely on to protect operations and ensure availability. These capabilities span identity and authentication, least-privilege authorization, system integrity, secure communications, segmentation and restricted data flow, event monitoring, and availability and resilience. With FortiOS as a common operating system, organizations can consistently apply and manage these security controls across deployments, from a FortiGate Rugged in a substation to a FortiGate VM in a cloud tenant. What this means for you. For organizations in critical infrastructure sectors - including manufacturing, energy and utilities, transportation, mining, and oil and gas - family-level certification provides independent evidence of security capabilities across certified deployments. * One body of evidence across certified sites and releases: One certificate covers FortiOS v7.4.x, v7.6.x, and v8.x.x across the platforms in scope, allowing sites on different upgrade schedules to share the same certification evidence. * Simpler procurement and compliance: A common certification can help organizations meet procurement and regulatory requirements referencing IEC 62443 across the covered form factors. * Freedom to choose the right platform: Architects can select the platform suited to the environment, whether rugged, wireless, high-throughput, or virtual, while maintaining certified security capabilities. Component certification does not, by itself, make an industrial system compliant. It does, however, give asset owners, system integrators, and auditors a verified building block for zones, conduits, and defense-in-depth architectures designed to meet IEC 62443 requirements. A continued commitment to security by Design. This certification extends a line of independent validation that began with Fortinet's IEC 62443-4-1 ML2 certification for secure product development and continued with the IEC 62443-4-2 SL4 certification for FortiOS 7.6.x. A certificate documents a product's capabilities at the time of assessment. Because industrial assets can remain in service for years, making maintenance windows scarce, OT and CI operators need to know how many flaws may reach the field after an assessment and how quickly they'll be addressed. That process depends on engineering practices. Secure by design reduces flaws at the source. Fortinet was among the first to sign CISA's Secure by Design Pledge in 2024. And over the past six months, the use of functions prone to command execution, memory-safety, and input-handling flaws fell by 95% in the applicable FortiOS code base. Frontier AI then searches for what remains. Models integrated into the development lifecycle have run more than 100 tests across 30 product families, alongside existing static, dynamic, and manual testing, with security analysts validating every finding. As a result, Fortinet finds most issues first, with 60% of vulnerabilities disclosed in 2025 discovered internally. That matters even more as AI shortens the time between disclosure and exploitation. For OT organizations who can't patch at short notice, fewer flaws reaching the field means fewer urgent maintenance windows and less exposure between them. With certified capabilities across FortiGate, FortiGate Rugged, FortiWiFi, and FortiGate VM, and a continually improving engineering practice, Fortinet helps customers confidently protect critical operations and meet evolving regulatory requirements.

Fortinet advances cybercrime cooperation at the CSI 2026 Global Summit. Connecting threat intelligence and community reporting to strengthen the global response to converging crime By Fortinet | October 12, 2026 Disrupting cybercrime requires connecting information that is often scattered across industries, communities, and national borders. A security researcher may identify malicious infrastructure, a financial institution may detect suspicious payments, and someone with knowledge of a criminal network may identify the people involved. Each holds information that becomes more useful when assessed alongside what others know. That need for cooperation is central to the Crime Stoppers International (CSI) 2026 Global Summit, taking place October 14-16 at the JW Marriott Panama in Panama City, where Derek Manky, Fortinet's chief security strategist and global vice president of threat intelligence, will be a featured speaker. His participation brings Fortinet's experience in threat research and public-private collaboration to a broader discussion on preventing and disrupting interconnected crime. For Fortinet, this summit builds on its ongoing work to make intelligence useful beyond an individual organization's defenses. Its shared Cybercrime Bounty program with CSI and its contributions to the World Economic Forum's Cybercrime Atlas demonstrate how diverse expertise and strategic partnerships can support investigations and strengthen accountability. Addressing the Convergence of criminal activity. Organized in partnership with the Caribbean, Bermuda, and Latin America Foundation, the summit's theme is "Crime Convergence: Cooperation Against Converging Crime." It will bring together participants from law enforcement, government, industry, and civil society to examine the overlap among cybercrime, financial crime, trafficking, corruption, and exploitation. Panama's role in international commerce, logistics, and finance makes it a relevant setting for these discussions. Cybersecurity plays a vital role in the broader response. Ransomware operations, for example, depend not only on the malware used to encrypt systems but also on access brokers, infrastructure providers, and money-laundering services that work together to sustain the operation. Understanding those relationships gives investigators and their partners more opportunities to intervene. Fortinet Inc. believe cooperation should be organized around those dependencies. Connecting technical findings with financial and investigative context can help partners determine where action will have the greatest effect and who has the authority to take it. This requires relationships that extend across organizational and professional boundaries, along with established processes for sharing and evaluating information. Bringing Fortinet expertise to a broader community. Manky's participation connects the summit to FortiGuard Labs's ongoing efforts to better understand criminal operations and deliver coordinated disruption, accountability, and deterrence. These efforts include ongoing engagement with industry partners and law enforcement, as well as research into the infrastructure and relationships that enable cybercrime to scale. The value of this exchange flows in both directions. While cybersecurity researchers help explain how attackers operate online, investigators and community organizations provide critical context that technical analysis alone may not capture. Bringing these perspectives together helps participants understand how their work can support one another. The summit provides a forum for developing those relationships around a shared public-safety objective. For Fortinet, this is an opportunity to contribute cybersecurity expertise while learning from organizations that address other parts of the same criminal networks. Connecting community information with investigative expertise. The Cybercrime Bounty program demonstrates how complementary capabilities can be put to work. CSI provides an anonymous reporting channel, while FortiGuard Labs assesses and enriches submitted information to determine its relevance to cybercriminal activity. Information with investigative value can then be referred to law enforcement. This division of responsibilities matters. People may have useful information but often hesitate to share it because they fear exposure or do not know whom to contact. Investigators, meanwhile, need information that has been evaluated and contextualized. The partnership addresses both needs by combining a trusted reporting process with specialized threat analysis. In August 2026, Fortinet announced the program's first live bounty in collaboration with CSI, Operation Silent Vector I, seeking information on the individuals behind the INC ransomware. The launch established a clear pathway for submitting relevant information to support investigations. Financial rewards may be available for qualifying information that contributes to an arrest or another material law enforcement outcome. The program's relevance to the summit is straightforward: community participation can strengthen the intelligence picture when there is a responsible process for evaluating information and for putting it in the hands of authorities. Mapping the networks that sustain cybercrime. Fortinet's work with the Cybercrime Atlas addresses a related challenge: understanding how criminal actors, infrastructure, and services connect. As a founding member and continuing contributor, Fortinet supports this collaborative initiative, hosted by the World Economic Forum, which uses open-source intelligence to map cybercriminal ecosystems and inform disruption efforts. Fortinet experts participate in the Cybercrime Atlas Investigations Group to map derivative intelligence in criminal infrastructure. That shared research can help both law enforcement and partners. The bounty program and Cybercrime Atlas illustrate complementary approaches to the same problem. Combining information about the people behind an operation and research into the networks supporting it can reduce gaps in understanding. Both efforts show why sustained cooperation matters to disrupting cybercrime. Building cooperation that continues beyond the summit. CSI's summit will also offer participants the opportunity to help shape The Panama Declaration, a planned commitment to cooperation against converging criminal threats. As Crime Stoppers marks its 50th anniversary, the gathering provides a timely opportunity to consider how trusted community reporting can evolve alongside changing criminal methods. For Fortinet, effective cooperation requires clear responsibilities, trusted relationships, and processes that ensure useful information reaches those able to act. These are practical requirements for turning a shared concern into sustained investigative support. Fortinet's participation in the summit reflects that commitment. Through FortiGuard Labs, the Cybercrime Bounty program, and the Cybercrime Atlas, among others, Fortinet contributes expertise to a global effort whose benefits reach organizations and communities. The goal is to make criminal networks easier to understand, harder to sustain, and more accountable for the harm they cause.

Intel poaches Marvell specialists to win back the AI chip market from competitors. By Sofi Reyes Editor | Content Writer Last updated: Oct 12, 2026 Intel builds out custom chip unit with outside hires as CEO Lip-Bu Tan pursues turnaround. Intel is expanding its custom processor business and bringing in executives who have worked at rival firms, part of CEO Lip-Bu Tan's effort to make manufacturing, packaging, and design of specialized chips a core element of the company's revival plan. A central piece of that push is the recruitment of Dean Jarnac, a former Marvell executive with knowledge of the ASIC market - chips built for specific tasks. Demand for such solutions spans data centers, networking equipment, security systems, and AI accelerators. Custom chips differ from general-purpose processors in that their architecture can be tailored to an individual customer's requirements. Analyst Jack Gold said Jarnac's background should help Intel gain a sharper understanding of what customers need and improve its chances of winning large contracts. The company can already point to one concrete deal: in July, Intel announced an agreement with Fortinet to design and produce a next-generation processor for network security. The revenue outlook is notable as well. CFO David Zinsner put the ASIC business's annual revenue run rate at nearly $2 billion and said it could reach $4 billion in the foreseeable future. Intel's ambitions extend beyond chip design. The company is working on EMIB and Foveros packaging technologies, which allow multiple dies to be combined and stacked, raising connection density and bandwidth. That capability matters especially for AI workloads, where performance hinges on both compute blocks and the exchange of data with memory. Still, Intel must demonstrate it can match established custom chip suppliers by hitting deadlines and delivering the required performance. For the company, the business is no longer a sideline - it is one of its bets on the future.