Compromise of Fortinet: tens of thousands of devices breached

Colleagues, a cybersecurity alert: Hudson Rock and SOCRadar report a campaign compromising tens of thousands of Fortinet firewalls and VPNs.

How they operate: attackers scan exposed devices and use leaked-password lists.

Impact: compromised devices act as eavesdroppers—collecting traffic and credentials for follow-on attacks.

Victims: IT, telecom, building materials and government sectors; large enterprises affected.

Actions: change passwords, restrict public admin access, enable MFA, and inventory externally exposed devices.

Why it matters: weak or leaked passwords turn the perimeter into a gateway for large-scale attacks.

Have you checked your infrastructure for exposed Fortinet devices?

#cybersecurity #Fortinet #passwords #infrastructure