
FBI: FortiBleed Attackers Can Lock Victims Out of Their Own Firewalls
Investigators reveal that threat actors are deleting admin accounts to trap themselves inside compromised FortiGate devices while blocking legitimate users.
Everything Threat Times has reported about Fortinet: 9 stories, newest first. Part of our Cyber Attacks coverage.

Investigators reveal that threat actors are deleting admin accounts to trap themselves inside compromised FortiGate devices while blocking legitimate users.

New offerings include Fortinet firewall management and broader infrastructure support to help manufacturers reduce OT security complexity.

Federal agencies urge operators to secure Fortinet gateways as a credential-compromise campaign continues to harvest data from SSL VPN appliances globally.

The FBI warns that the FortiBleed attack campaign remains active, with SOCRadar reporting more than 86,644 compromised Fortinet FortiGate devices across 194 countries.

U.S. law enforcement agencies issued a new alert stating that the FortiBleed threat persists, posing risks of user lockouts and ransomware deployment.

Law enforcement agencies report that the FortiBleed credential harvesting campaign remains active, targeting internet-facing Fortinet devices and exploiting legacy password storage methods.

The FBI reports that attackers continue to exploit the FortiBleed vulnerability to deny legitimate administrators access to Fortinet devices.

Threat actors are abusing a Fortinet vulnerability to delete legitimate administrator accounts and passwords, effectively locking victims out of their security devices.

Federal agencies alert administrators that Fortinet systems remain under active targeting for lockout attacks via the FortiBleed vulnerability.