Massive password-stealing attack hits 75k Fortinet firewalls

Massive credential-theft campaign targeting Fortinet FortiGate devices exposed working VPN and admin passwords across ~75,000 devices and 21,632 unique domains worldwide; researchers verified the data, attributed it to a Russian-speaking group that intercepted SSL VPN authentication, used a 45-GPU cluster to crack hashes, processed billions of attempts, and fully compromised several organizations (including a Turkish NATO contractor), while Fortinet characterized much of the data as reshared or brute-forced older credentials.