Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks.

Ransomware 'not off the table,' Arctic Wolf threat hunter tells El Reg Updated Miscreants running a "mass exploitation campaign" against Fortinet firewalls, which peaked in December, may be using an unpatched zero-day vulnerability to compromise the equipment,

Fortinet has disclosed a new critical zero-day vulnerability affecting some of its FortiGate firewalls. In a security advisory published on January 14, FortiGuard Labs revealed a new authentication bypass vulnerability affecting FortiOS and FortiProxy that could be exploited to hack FortiGate devices.

Security researchers say "tens" of Fortinet devices have been compromised so far as part of the weeks-long hacking campaign.

Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684.

A new threat actor has leaked configuration files and virtual private network (VPN) information for 15,000 firewall devices provided by security vendor Fortinet.

Fortinet confirmed exploitation of a critical-severity vulnerability affecting FortiGate firewalls after Arctic Wolf researchers said that ‘mass exploitation’ of the vulnerability is ‘likely.’

Arctic Wolf, a prominent cybersecurity firm, recently detected a widespread exploitation campaign targeting Fortinet FortiGate firewall devices. This campaign, tied to a critical vulnerability known as CVE-2024-55591,