Attackers cracked 75,000 Fortinet firewalls with old passwords, not a zero-day

Security Researchers Uncover Massive Cache of Stolen Credentials for Fortinet Firewalls

Security researchers have uncovered a sprawling cache of stolen credentials for Fortinet firewalls, exposing login details for tens of thousands of organizations around the world. The dataset, dubbed “FortiBleed,” contains plaintext usernames, emails and passwords for 73,932 unique Fortinet FortiGate firewall and VPN devices across 194 countries, touching more than 21,000 domains. Researchers estimate that…

This story continues at The Next Web