Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

By Tim Starks

AI Summary

The FBI and Secret Service issued a joint advisory that FortiBleed, a Fortinet vulnerability uncovered earlier this summer, remains an active exploitation campaign capable of locking out users and serving as a ransomware delivery mechanism. Security teams running unpatched Fortinet products should treat this as an ongoing incident-response priority rather than a routine patch cycle item.

Read full article → https://cyberscoop.com/fortibleed-fortinet-vpn-ran…

Relevance score: 87.0/100

# More from October 07

1
Hackers obtain counterfeit TLS certificates for Google and other large services Ars Technica Security
2
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier SecurityWeek
3
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products The Hacker News
4
8.8 Million Impacted by Data Breach at Denmark’s Central Person Register SecurityWeek
6
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland BleepingComputer
7
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The Hacker News
8
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits The Hacker News
9
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System SecurityWeek
10
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware SecurityWeek