Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

US and South Korean agencies issued a joint advisory on Gunra, a ransomware-as-a-service operation leveraging known Fortinet authentication-bypass flaws (CVE-2024-55591, CVE-2025-24472) to target critical infrastructure and government organizations worldwide; Gunra's affiliates perform MFA bypass and session hijacking, delete backups and archived data, run double-extortion leaks, and the advisory urges patching internet-facing VPN/firewall appliances, implementing offline immutable backups, and network segmentation.