CVE-2025-59718: Fortinet Vulnerability Exploited in FortiBleed Campaign
CVE-2025-59718 is a vulnerability in Fortinet products that was likely exploited by threat actors in the FortiBleed campaign to reuse credentials from…
Tag: Fortinet
CVE-2025-59719: Fortinet Vulnerability Exploited in FortiBleed Campaign
CVE-2025-59719 is a vulnerability in Fortinet products that was likely exploited by threat actors in the FortiBleed campaign to reuse credentials from…
SantaAd: Russian-Speaking Account Advertising Fortinet Device Access
A Russian-speaking account named SantaAd advertised access to thousands of Fortinet devices for a starting price of $30,000, later increased to $60,000.…
Fortinet FortiGuard Labs Discovers Evooo1Bot
Fortinet's threat research division, FortiGuard Labs, identified and analyzed the Evooo1Bot botnet, highlighting its exploitation of known vulnerabilities and its proxy functionality.
FortiGate Firewall and VPN Concentrator Compromised
The FortiGate device at the wind farm was exploited due to an internet-exposed VPN without MFA, allowing the attacker to gain administrative…
FortiOS: Fortinet Operating System
FortiOS is the operating system for Fortinet devices. The FortiBleed campaign exploited older SHA-256 hashing mechanisms in FortiOS versions prior to 7.2.11,…
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…