TLDR Tech / InfoSec
FortiBleed Leak Exposes Fortinet VPN Credentials for 73K Devices
A security researcher discovered a server that contained credentials from an ongoing Fortinet bruteforce campaign. The server contained nearly 74K usernames, passwords, and email addresses for Fortinet VPN appliances that the attacker harvested through brute force attacks. The researcher also stated that the attacker also obtained credentials by brute forcing Microsoft SQL Server databases and cracking intercepted SSL VPN hashes.
Read the full story