FortiGate Archives

Threat actors are leveraging FortiGate Next-Generation Firewall (NGFW) appliances as entry points to compromise target networks in a new campaign that cybersecurity researchers are drawing attention to. According to a research released today by SentinelOne, the activity entails taking advantage of previously revealed security flaws or weak credentials in order to extract configuration files that contain information on network topology and service account credentials. According to the security group, the campaign has targeted settings related to government, healthcare, and managed service providers. According to security researchers Alex Delamotte, Stephen Bromfield, Mary Braden Murphy, and Amey Patne, FortiGate network appliances have significant access to the environments they were...

By taking advantage of a known major security vulnerability between 2022 and 2023, state-sponsored threat actors supported by China were able to access 20,000 Fortinet FortiGate systems globally, suggesting that the operation had a wider effect than previously thought. The Dutch National Cyber Security Centre (NCSC) stated in a recent bulletin that the state actor behind this operation knew about the FortiGate system vulnerability at least two months before Fortinet revealed it. In just one "zero-day" period, 14,000 devices were infected by the actor alone. Numerous Western countries, international organizations, and a sizable number of defense industry businesses were the targets of the effort read more China-Backed Hackers Exploit Fortinet Flaw Infecting 20000 Systems Globally. ...

Tag: FortiGate

FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials

China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally