Didn't patch the Fortigate.
In honour of spooky month, share a 4 word horror story that only someone in your profession would understand.
rm -rf ~/
rm -rf ~/
"The chancellor approved it"
October 12, 2025 at 1:52 PM
Didn't patch the Fortigate.
Fortinet Fortigate firewall admins - another dumpster truck for ye doublepulsar.com/fortibleed-7...
FortiBleed — 75k Fortinet firewalls have admin passwords cracked
A look inside a massive dump of allowing access to organisations protected by Fortigate firewall solutions.
doublepulsar.com
June 17, 2026 at 2:25 PM
Fortinet Fortigate firewall admins - another dumpster truck for ye doublepulsar.com/fortibleed-7...
DON'T EXPOSE YOUR MANAGEMENT INTERFACE TO THE INTERNET
arcticwolf.com/resources/bl...
arcticwolf.com/resources/bl...
Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls - Arctic Wolf
Arctic Wolf Labs identified a campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces.
arcticwolf.com
January 10, 2025 at 5:17 PM
DON'T EXPOSE YOUR MANAGEMENT INTERFACE TO THE INTERNET
arcticwolf.com/resources/bl...
arcticwolf.com/resources/bl...
New (used) toy for the homelab. #fortigate #fortinet
July 25, 2025 at 2:45 AM
New (used) toy for the homelab. #fortigate #fortinet
Fake copies of Belsen Group's FortiGate config leaks install malware
chris.partridge.tech/2025/fake-fo...
chris.partridge.tech/2025/fake-fo...
January 20, 2025 at 9:43 PM
Fake copies of Belsen Group's FortiGate config leaks install malware
chris.partridge.tech/2025/fake-fo...
chris.partridge.tech/2025/fake-fo...
A break down of the FortiBleed data leak campaign impacting 80,000 FortiGate systems.
FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems
A dataset containing valid administrative and VPN credentials for tens of thousands of Fortinet FortiGate firewalls.
www.recordedfuture.com
June 21, 2026 at 1:02 PM
A break down of the FortiBleed data leak campaign impacting 80,000 FortiGate systems.
Arctic Wolf says threat actors are using a new Fortinet zero-day to mass compromise of Fortinet FortiGate firewalls arcticwolf.com/resources/bl...
A patch is here: fortiguard.fortinet.com/psirt/FG-IR-...
A patch is here: fortiguard.fortinet.com/psirt/FG-IR-...
Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls - Arctic Wolf
Arctic Wolf Labs identified a campaign targeting Fortinet FortiGate firewall devices with exposed management interfaces.
arcticwolf.com
January 15, 2025 at 11:26 AM
Arctic Wolf says threat actors are using a new Fortinet zero-day to mass compromise of Fortinet FortiGate firewalls arcticwolf.com/resources/bl...
A patch is here: fortiguard.fortinet.com/psirt/FG-IR-...
A patch is here: fortiguard.fortinet.com/psirt/FG-IR-...
A new hacking group has leaked the configuration files, IP addresses, and VPN credentials for over 15,000 FortiGate devices for free on the dark web, exposing a great deal of sensitive technical information to other cybercriminals.
Hackers leak configs and VPN credentials for 15,000 FortiGate devices
A new hacking group has leaked the configuration files, IP addresses, and VPN credentials for over 15,000 FortiGate devices for free on the dark web, exposing a great deal of sensitive technical information to other cybercriminals.
www.bleepingcomputer.com
January 16, 2025 at 2:57 AM
A new hacking group has leaked the configuration files, IP addresses, and VPN credentials for over 15,000 FortiGate devices for free on the dark web, exposing a great deal of sensitive technical information to other cybercriminals.
Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configuration data.
Hackers breach Fortinet FortiGate devices, steal firewall configs
Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configuration data.
www.bleepingcomputer.com
January 22, 2026 at 11:49 AM
Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall configuration data.
The Green Girl is so excited that her friend @jonesnco.bsky.social sent her 4 blind eggs from Japan so she can build a mini data center. #AlwaysBeLabbing
December 15, 2024 at 2:03 AM
The Green Girl is so excited that her friend @jonesnco.bsky.social sent her 4 blind eggs from Japan so she can build a mini data center. #AlwaysBeLabbing
Breaking bare metal firmware encryption (FortiGate firewalls) for security research.
Credits Jon Williams
bishopfox.com/blog/breakin...
#Fortinet #infosec
Credits Jon Williams
bishopfox.com/blog/breakin...
#Fortinet #infosec
January 26, 2024 at 9:00 AM
Breaking bare metal firmware encryption (FortiGate firewalls) for security research.
Credits Jon Williams
bishopfox.com/blog/breakin...
#Fortinet #infosec
Credits Jon Williams
bishopfox.com/blog/breakin...
#Fortinet #infosec
TrustedSec Tech Brief
00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update
www.youtube.com/watch?v=3mSD...
00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update
www.youtube.com/watch?v=3mSD...
TrustedSec Tech Brief - November 2024
YouTube video by TrustedSec
www.youtube.com
November 19, 2024 at 4:32 PM
TrustedSec Tech Brief
00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update
www.youtube.com/watch?v=3mSD...
00:30 - NTLM Hash Disclosure Zero-Day
01:45 - Task Scheduler Vulnerability
02:30 - Exchange Server Issues
03:15 - AD Certificate Services Flaw
04:00 - Vulnerability Breakdown
04:45 - Palo Alto Zero-Day
05:30 - FortiGate VPN Update
www.youtube.com/watch?v=3mSD...
『この事例は、AIの悪用によって従来は大規模で熟練したチームが必要だったサイバー攻撃が、比較的経験の浅いチームでも可能になっていることを示唆するものです。』
生成AIを悪用するロシア語圏のハッカーが55カ国で600台以上のFortiGateデバイスを侵害
gigazine.net/news/2026022...
生成AIを悪用するロシア語圏のハッカーが55カ国で600台以上のFortiGateデバイスを侵害
gigazine.net/news/2026022...
生成AIを悪用するロシア語圏のハッカーが55カ国で600台以上のFortiGateデバイスを侵害
AmazonのセキュリティチームであるAmazon Threat Intelligenceが2026年2月20日、ロシア語を話すハッカーらが複数の商用生成AIサービスを悪用し、ネットワークファイアウォール「FortiGate」が搭載された600台以上のデバイスを侵害したと報告しました。この事例は、AIの悪用によって従来は大規模で熟練したチームが必要だったサイバー攻撃が、比較的経験の浅いチームでも可...
gigazine.net
February 27, 2026 at 10:03 AM
『この事例は、AIの悪用によって従来は大規模で熟練したチームが必要だったサイバー攻撃が、比較的経験の浅いチームでも可能になっていることを示唆するものです。』
生成AIを悪用するロシア語圏のハッカーが55カ国で600台以上のFortiGateデバイスを侵害
gigazine.net/news/2026022...
生成AIを悪用するロシア語圏のハッカーが55カ国で600台以上のFortiGateデバイスを侵害
gigazine.net/news/2026022...
New CVE in Fortigate Wireless Manager - RCE and Severity of 9.8 nvd.nist.gov/vuln/detail/... #ShieldsUp
NVD - CVE-2023-34990
nvd.nist.gov
December 18, 2024 at 8:43 PM
New CVE in Fortigate Wireless Manager - RCE and Severity of 9.8 nvd.nist.gov/vuln/detail/... #ShieldsUp
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
thehackernews.com
December 16, 2025 at 11:21 AM
Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass
"What is IPv6?" - my fortigate, probably
┏┓
┃┃╱╲ In this
┃╱╱╲╲ house
╱╱╭╮╲╲ we pretend
▔▏┗┛▕▔ that ipv6
╱▔▔▔▔▔▔▔▔▔▔╲
does not exist
╱╱┏┳┓╭╮┏┳┓ ╲╲
▔▏┗┻┛┃┃┗┻┛▕▔
┃┃╱╲ In this
┃╱╱╲╲ house
╱╱╭╮╲╲ we pretend
▔▏┗┛▕▔ that ipv6
╱▔▔▔▔▔▔▔▔▔▔╲
does not exist
╱╱┏┳┓╭╮┏┳┓ ╲╲
▔▏┗┻┛┃┃┗┻┛▕▔
February 2, 2024 at 6:49 PM
"What is IPv6?" - my fortigate, probably
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks.
www.bleepingcomputer.com
February 21, 2026 at 2:06 PM
Amazon: AI-assisted hacker breached 600 FortiGate firewalls in 5 weeks
15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials
15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials
Discover the shocking FortiGate leak exposing over 15,000 firewall configurations and VPN credentials. Learn more about the vulnerability and its impact on cybersecurity.
securityonline.info
January 16, 2025 at 4:49 AM
15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials
