30,000 Fortinet Firewalls Compromised: Massive Exposure Detected
Threat
intelligence firm SOCRadar has detected approximately 30,000 compromised
Fortinet firewalls that are actively exposing enterprise networks to potential
hacking. The discovery highlights a critical and ongoing vulnerability in one
of the most widely deployed network security appliances in the world.
The
compromised devices appear to have been exploited through known vulnerabilities
in FortiOS that were not promptly patched by affected organizations. Attackers
are believed to have gained persistent backdoor access, enabling them to
monitor traffic, exfiltrate data, or pivot deeper into corporate networks.
Fortinet has
urged all customers to update their firmware to the latest available versions
and conduct thorough audits of their network devices. The company also
recommends reviewing firewall logs for signs of unauthorized access and
resetting administrative credentials immediately.
Security
experts warn that this incident reflects a broader trend: perimeter security
devices such as firewalls and VPN appliances have become high-value targets for
nation-state actors and ransomware groups alike. Organizations are encouraged
to apply a defense-in-depth strategy rather than relying solely on perimeter
devices for protection.
Comments