FortiBleed Campaign Exposes Credentials from Over 430,000 Fortinet Firewalls Worldwide

A large-scale cybersecurity campaign dubbed 'FortiBleed' has harvested credentials from over 430,000 FortiGate firewalls globally. Researchers from SOCRadar's Threat Research Unit confirmed the campaign's link to two active ransomware operations, INC Ransom and Lynx. The exposed credentials, including over 86,000 administrator logins, could enable unauthorized access to devices and compromise target networks and data, with maritime, port, and energy companies identified among those impacted.