Tag: Fortigate

A new cyber campaign has been discovered, targeting Fortinet FortiGate firewall devices with exposed management interfaces. The attackers are believed to have exploited a potential zero-day vulnerability to gain unauthorized access to these devices. Key points about the campaign: Exploitation of Exposed Interfaces: The attackers focused on firewalls with publicly exposed management interfaces, performing unauthorized administrative logins. They modified configurations, created new user accounts, and used SSL VPN authentication to access the devices. Unknown Initial Access Vector: The exact method of initial …