An update on FortiBleed — what’s happening with victim orgs

An update on FortiBleed — what’s happening with victim orgs Two days ago I wrote something about FortiBleed: FortiBleed - 75k Fortinet firewalls have admin passwords cracked Fortinet told media orgs the data was from prior breaches and bruteforcing. That isn’t true — or at least, not the full story. We’ll get into that in this blog. I’ve been working with impacted organisations to help them remediate — they’ve given me logs in return. CloudSEK has a really good look inside the threat actor infrastructure he