CyberNew CyberNew
Defensive Security & Blue Team The Record 1 week ago

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: MEDIUM
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Defensive Security & Blue Team

Analyst Takeaway

"Ports on a Fortinet firewall. Image: Fortinet / YouTube FBI, Secret Service add to warnings of FortiBleed credential stealing campaign More than 86,000 internet-facing Fortinet FortiGate firewalls and virtual private network (VPN) gateways have been compromised as part of an ongoing campaign tracked as FortiBleed, according to the FBI and Secret Service. The agencies released an advisory on..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Fortinet hardware
Ports on a Fortinet firewall. Image: Fortinet / YouTube

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign

More than 86,000 internet-facing Fortinet FortiGate firewalls and virtual private network (VPN) gateways have been compromised as part of an ongoing campaign tracked as FortiBleed, according to the FBI and Secret Service. 

The agencies released an advisory on Tuesday warning organizations that the credential stealing attacks on Fortinet devices have continued for months across 194 countries.  

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →