FBI Warns FortiBleed Remains Active After Amassing 86644 Fortinet Device Credentials

The US Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internetfacing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways The campaign exploits reused or leaked credentials and legacy SHA256 password storage enabling threat