Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world

Cybercriminals are running a global campaign dubbed "FortiBleed" that scans internet-facing Fortinet firewalls and VPN gateways, uses lists of leaked or known passwords to brute-force or reuse credentials, and then harvests additional credentials from monitored traffic to expand the compromise; security firms report between ~30,000 and 73,000 affected devices across many countries and industries, including major companies, and attribute the activity to Russian-speaking actors.