
FBI: FortiBleed Attackers Can Lock Victims Out of Their Own Firewalls
Investigators reveal that threat actors are deleting admin accounts to trap themselves inside compromised FortiGate devices while blocking legitimate users.
Everything Threat Times has reported about FortiGate: 7 stories, newest first. Part of our Cyber Attacks coverage.

Investigators reveal that threat actors are deleting admin accounts to trap themselves inside compromised FortiGate devices while blocking legitimate users.

New offerings include Fortinet firewall management and broader infrastructure support to help manufacturers reduce OT security complexity.

Federal agencies urge operators to secure Fortinet gateways as a credential-compromise campaign continues to harvest data from SSL VPN appliances globally.

The FBI warns that the FortiBleed attack campaign remains active, with SOCRadar reporting more than 86,644 compromised Fortinet FortiGate devices across 194 countries.

Law enforcement agencies report that the FortiBleed credential harvesting campaign remains active, targeting internet-facing Fortinet devices and exploiting legacy password storage methods.

The FBI reports that attackers continue to exploit the FortiBleed vulnerability to deny legitimate administrators access to Fortinet devices.

Federal agencies alert administrators that Fortinet systems remain under active targeting for lockout attacks via the FortiBleed vulnerability.