74,000 Fortinet firewall credentials exposed in FortiBleed data leak

A Russian-speaking cybercriminal group harvested and exposed credentials from configuration files for about 73,932 Fortinet firewalls and VPN gateways worldwide (dubbed “FortiBleed”), using intercepted SSL VPN authentication hashes cracked on a 45-GPU cluster and leveraging exposed FortiGate management interfaces; many high-profile organizations and government entities are affected, with confirmed compromises and exfiltration in some cases. The report urges immediate remediation (rotate credentials, enforce MFA, upgrade FortiOS, remove management interfaces from the internet) and provides a lookup tool for affected organizations.