China's FortiGate attacks more extensive than first thought

The Netherlands' NCSC warns a China-linked mass-exploitation campaign used a critical FortiOS SSL‑VPN zero-day (CVE-2022-42475) to compromise roughly 20,000 FortiGate devices (about 14,000 during a zero-day window) and deploy the Coathanger RAT for persistent access; victims include Western governments, international organizations and numerous defence firms, and infections often require device reformatting to remove, highlighting rising risk from vulnerable edge devices.