CISA warns Fortinet users to secure devices after FortiBleed leak

CISA warned that nearly 74,000 Fortinet firewall and SSL-VPN credentials were exposed in a data leak called “FortiBleed,” discovered by researcher Volodymyr Diachenko; the dataset includes plaintext usernames and passwords tied to many high-profile organizations across 194 countries, appears to have been used in mass credential attempts by a Russian-speaking threat group, and prompted emergency mitigation guidance and tooling to check affected devices.