FBI FortiBleed Warning Reveals the Scale of Credential Harvesting

The FBI and U.S. Secret Service advisory details the FortiBleed credential-harvesting operation that compromised over 86,000 FortiGate devices worldwide by leveraging leaked credentials, credential stuffing, password spraying, and GPU-accelerated hash cracking; attackers validated and organized stolen credentials, created persistent administrative access, and sold validated VPN access to ransomware affiliates, prompting recommendations to restrict external management, enforce phishing-resistant MFA, reset credentials, and strengthen password hashing.