… "Fortinet is aware of a reported third-party credential-harvesting campaign targeting Fortinet firewalls and VPN gateways. We are committed to safeguarding our customers, and we diligently and continuously monitor threat actor darknet activity," Fortinet told BleepingComputer. …
… CISA warns Fortinet users to secure devices after FortiBleed leak A Glimpse into the “Search Your Target” Market for Stolen Credentials Critical Fortinet FortiSandbox flaws now exploited in attacks Why Account Takeovers Are Rising and How to Stop Them Credentials FortiBleed Fortigate Fortigate Snif… …
… BleepingComputer kontaktierte Fortinet zur Bestätigung der Angriffe, erhielt zunächst aber keine Antwort. Deshalb sollte die Formulierung präzise bleiben: Sicherheitsforscher berichten von aktiven Ausnutzungsversuchen; Fortinet hat diese bislang nicht öffentlich bestätigt. …
… Fortinet tauchte gleich in zwei Zusammenhängen auf. …
… Almost all are still online, and Fortinet devices. It appears to be recent data," Beaumont said , adding that the leaked data appears to have originated from Fortinet configuration files. …