FortiBleed: Massive Credential Theft Compromises 75,000+ Fortinet Devices Globally

FortiBleed: A large-scale credential harvesting campaign discovered by researcher Volodymyr Diachenko has compromised over 75,000 Fortinet firewall and VPN devices across 194 countries. The Russian-speaking threat group executed approximately 1.16 billion credential attempts and harvested verified usernames and plaintext passwords — including entries tied to major corporations — impacting government, telecommunications, healthcare and other sectors; organizations are urged to rotate passwords and enable multi-factor authentication immediately.