FBI and Secret Service Warn of FortiBleed Lockout Threat

US authorities (FBI and Secret Service) warn that the FortiBleed campaign continues to compromise Fortinet FortiGate firewalls and SSL VPN gateways worldwide — reportedly affecting ~86,644 devices across 194 countries — by leveraging leaked credentials, automated scanning, credential stuffing/password spraying, and GPU-accelerated cracking. Attackers create persistent administrative accounts, perform Active Directory enumeration and lateral movement, and stolen credentials are being used by ransomware affiliates; the advisory includes isolation, threat hunting, credential resets, MFA, and other hardening and eviction recommendations.