FortiBleed Leak Exposes ~74,000 Fortinet Credentials, CISA Warns

A data leak dubbed “FortiBleed” exposed nearly 74,000 Fortinet firewall and VPN credentials, according to CISA. The agency is urging Fortinet customers to secure their devices in response. The exposure covers a large share of internet-accessible Fortinet firewalls and VPNs, raising the risk of unauthorized remote access. No detail yet on whether the leaked credentials are being actively used in follow-on attacks. Fortinet admins should treat any device that hasn’t rotated VPN/firewall credentials as potentially compromised and do so immediately.