CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in years

Multiple cybersecurity firms and CISA warned that a zero-day vulnerability in FortiGate firewalls (CVE-2024-55591) is being actively exploited to create administrative accounts and alter firewall policies; this risk is compounded by a recent release of ~15,000 leaked FortiGate configurations from 2022. Fortinet, Arctic Wolf, Rapid7 and others have observed exploitation or reconnaissance activity, prompting an urgent patching directive for federal agencies and widespread incident-response guidance.