'FortiBleed' Leak Exposes Fortinet VPN Credentials for 73,000 Devices

A newly discovered leak dubbed “FortiBleed” has exposed what appears to be a large collection of Fortinet and FortiGate VPN credentials covering 73,932 firewall URLs at organizations worldwide. The scale of the exposure means a significant number of VPN endpoints could be at risk of unauthorized access if the leaked credentials are valid and unrotated. Organizations using FortiGate VPNs should rotate credentials and review authentication logs for anomalous access as a precaution, even without confirmation their own devices are on the list.