A sophisticated Russian credential-harvesting campaign called FortiBleed has compromised over 430,000 FortiGate firewalls globally, extracting 110 million credentials through a five-phase operation still targeting 19,000 devices. The attack abuses legitimate firmware diagnostics to passively intercept authentication traffic without deploying malware, enabling ransomware attacks and breaching a NATO-aligned defense contractor. Organizations face imminent risk and should immediately rotate all credentials, enforce multifactor authentication, and remove firewall management interfaces from internet exposure.
Read the full article at Security Affairs
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
