Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day

Fortinet customers are urged to apply patches after Shadowserver found ~48,457 Fortinet devices remain exposed to CVE-2024-55591, a zero-day actively exploited in the wild; attackers are stealing credentials and using admin access to move laterally with ransomware possible. The vendor also confirmed that the Belsen Group recently published thousands of Fortinet device configurations and passwords stolen in 2022, further raising compromise risk for unpatched or unremediated systems.