ConciseSignal
Following
CybersecurityReported

FBI warns FortiBleed attacks still target Fortinet firewalls

The FBI and Secret Service have issued a warning that FortiBleed, a campaign exploiting credentials to target Fortinet firewalls and VPN gateways, is ongoing and can lock administrators out of affected devices. Attackers use leaked or stolen credentials to access internet-facing Fortinet devices, create or delete admin accounts, and, in some cases, provide access for ransomware groups. Over 86,000 devices have been compromised globally.

Why it mattersThis campaign highlights ongoing risks from exposed device credentials and shows that standard mitigation like patching or password resets may not be enough. Organizations using Fortinet hardware face a heightened risk of ransomware and may lose administrative access to critical infrastructure.

Sources covering this

CyberScoopAlert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks9:03 PM →The RegisterHeadline onlyFortiBleed still a bleeding nuisance as FBI confirms ongoing attacks10:52 AM →The Hacker NewsFBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials11:56 AM →BleepingComputerFBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins9:28 PM →SecurityWeekHeadline onlyFortiBleed Attackers Locking Victims Out of Fortinet Devices7:52 AM →Infosecurity MagazineHeadline onlyFBI and Secret Service Warn of FortiBleed Lockout Threat8:40 AM →

How it unfolded

  • CyberScoop Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
  • The Register FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks
  • The Hacker News FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
  • BleepingComputer FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
  • SecurityWeek FortiBleed Attackers Locking Victims Out of Fortinet Devices
  • Infosecurity Magazine FBI and Secret Service Warn of FortiBleed Lockout Threat
Concise Signal DailyEnterprise AI, security & business tech.Weekdays, 7am Eastern · Sample issue

More in Cybersecurity