TLDR Tech / InfoSec
FortiBleed: 86,000 Fortinet Device Credentials Compromised
A large credential theft campaign called FortiBleed has exposed over 86,000 valid logins to internet-facing Fortinet firewalls and VPNs across 194 countries, impacting thousands of organizations, including government and critical infrastructure organizations. Attackers intercepted SSL VPN authentication, cracked password hashes using a 45‑GPU cluster, and pivoted into internal Active Directory environments after roughly 1.16 billion credential attempts against 320,000 FortiGate targets and billions more attempts on MSSQL servers.
Read the full story