There’s No Patch for a Stolen Password: What FortiBleed Teaches Us About the Limits of Detection

Executive summary: The report discusses the FortiBleed credential exposure of ~73,932 FortiGate VPN credentials across 194 countries and highlights how credential-based intrusions—where attackers authenticate with legitimate stolen credentials—defeat signature and anomaly detection, enabling lateral movement into Active Directory and ransomware deployment; it advocates a prevention-first model (Automated Moving Target Defense) that blocks malicious payload execution rather than relying solely on detection at login.