FortiGate Compromise Doesn't End with a Patch—What to Verify Assuming Credentials Have Already Been Stolen

In a joint advisory on October 6, the U.S. Federal Bureau of Investigation (FBI) and the Secret Service (USSS) warned that ...
SecurityWeek

FortiBleed Attackers Locking Victims Out of Fortinet Devices

The FortiBleed campaign is ongoing, with 86,000 Fortinet devices compromised and attackers locking organizations out.
Hackread

FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices

FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised ...
The Hacker News

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

FBI and USSS warn FortiBleed remains active, using stolen credentials and traffic sniffing to harvest Fortinet authentication data.
Threatpost

Thousands of Fortinet VPN Account Credentials Leaked

They were posted for free by former Babuk gang members who’ve bickered, squabbled and huffed off to start their own darn ransomware businesses, dagnabbit. UPDATE: Subsequent reporting and disclosures ...
Help Net Security

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, U.S. agencies warn.
Help Net Security

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn

A suspected (but currently unidentified) zero-day vulnerability in Fortinet FortiWeb is being exploited by unauthenticated attackers to create new admin accounts on vulnerable, internet-facing devices ...
SDxCentral

FBI on FortiBleed: Fortinet users at major risk of firewall lockout

FortiBleed was achieved through the use of a 45-GPU cluster to process stolen password data. Attackers used this computing power to analyze credential patterns each time the cluster successfully ...