FortiBleed campaign exposes credentials tied to 73,000 Fortinet devices (opens in new tab)

Security researchers described a large credential-harvesting campaign, dubbed FortiBleed, involving tens of thousands of Fortinet firewall and VPN devices worldwide. Counts varied by researcher: Ars Technica cited nearly 74,000 compromised Fortinet devices from more than 21,000 IP addresses in 194 countries; BleepingComputer cited 73,932 firewall URLs; Hudson Rock cited more than 73,000 unique Fortinet URLs; and SOCRadar cited more than 30,000 hacked devices. Researchers and security firms sa...