15K Fortigate Firewall Configs Leaked By Belsen Group: Dumped Using Zero-Day in 2022

This report describes a large-scale leak of over 15,000 FortiGate firewall configurations allegedly published by the Belsen Group; the leak is linked to mass exploitation of an authentication-bypass zero-day (CVE-2022-40684) in 2022 and includes exposed credentials, firewall rules, and device certificates, with an associated pastebin of affected IPs and recommended mitigations (credential changes, certificate rotation, firewall audits, and forensic investigation).