FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.

A significant data leak, dubbed "FortiBleed," has exposed approximately 73,932 Fortinet VPN credentials for firewall URLs across numerous organizations worldwide. The leak, discovered by Bob Diachenko, reveals a multi-operator threat group, believed to be Russian-speaking, that conducted extensive credential brute-force attacks and subsequently exploited the compromised credentials for lateral movement. This incident highlights the vulnerability of Fortinet devices and the potential for significant damage when credentials are exposed.