threat-intel
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
High
Summary
CISA has issued a warning to Fortinet customers regarding FortiBleed, a campaign targeting 86,644 FortiGate devices globally. The attack, attributed to Russian-speaking threat actors, leverages a two-step approach involving credential stuffing and passive network monitoring. The vulnerability stems from organizations failing to rename default accounts or rotate factory credentials, leading to widespread compromise across sectors like telecom, government, and education, particularly in India, the U.S., Mexico, Colombia, and Thailand.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data