#FortiGate
All CosmicBytez Labs articles tagged #FortiGate, across news, security advisories, how-to guides, and projects.
- News
Alert: FortiBleed Remains an Active Campaign, Can Lock Out Users or Lead to Ransomware
The FBI and Secret Service warn FortiBleed is still active, now tied to 400,000+ Fortinet devices and causing lockouts that precede ransomware attacks.
- News
FortiBleed: 5-Stage Attack Chain Behind 110 Million Credential Heist on FortiGate Firewalls
Deep analysis of the FortiBleed operation reveals a sophisticated five-stage credential harvesting pipeline — custom Golang sniffers, Telegram-based...
- News
FortiBleed: Russian IAB Harvested 110 Million Credentials from 430,000 FortiGate Firewalls
A financially motivated Russian-speaking initial access broker behind the FortiBleed campaign has been systematically harvesting credentials from over...
- Newsletter
June 23 Digest: FortiBleed, Klue/Salesforce Supply Chain, Squidbleed, GitHub Actions Fix
A Russian IAB harvests 110M credentials from FortiGate firewalls; the Icarus group drains hundreds of Salesforce orgs via Klue OAuth tokens; a 29-year-old...
- News
FortiBleed Campaign Used Custom FortiGate Sniffer to Steal Credentials
The large-scale FortiBleed campaign targeting Fortinet FortiGate devices deployed custom packet sniffers to harvest authentication secrets from...
- News
FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
A data leak dubbed FortiBleed has exposed configuration files and VPN credentials for 73,932 Fortinet firewall URLs, putting organizations worldwide at...
- News
AI-Armed Amateur Hacker Compromises 600+ FortiGate
Amazon's threat intelligence team has documented how a Russian-speaking, financially motivated actor used multiple commercial generative AI tools to...
- HOWTO
FortiGate Performance Optimization: A Tuning Guide for Throughput
Optimize FortiGate performance with NP/CP offloading, session table tuning, UTM profile optimization, SD-WAN performance rules, conserve mode prevention,...
- HOWTO
FortiGate Security Hardening: Best Practices for Enterprise
Complete FortiGate hardening guide covering admin access lockdown, firmware management, interface hardening, DNS/NTP security, certificate management,...
- Newsletter
Late February Roundup: New Guides, Checklists & Threat
New IT offboarding checklist, endpoint security baseline, BGP monitoring guide, ClickFix detection guide, plus AI-powered attacks on FortiGate devices, a...
- Security
Fortinet FortiOS SSL VPN Heap Overflow Enables Pre-Auth RCE
Fortinet patches a critical heap-based buffer overflow in FortiOS SSL VPN that allows unauthenticated remote code execution on FortiGate appliances....
- HOWTO
FortiGate Firewall Policy Management with PowerShell
Automate FortiGate firewall policy creation, backup, and auditing using PowerShell and the FortiOS REST API. Includes bulk rule deployment, change...
- HOWTO
FortiGate IPsec VPN: Site-to-Site with Azure
Configure IPsec site-to-site VPN between FortiGate firewall and Azure VPN Gateway. Covers IKE configuration, routing, BGP, and high availability.
- HOWTO
FortiGate SSL VPN Setup: Secure Remote Access Configuration
Configure FortiGate SSL VPN for secure remote user access. Covers portal setup, user authentication, firewall policies, and FortiClient configuration.
- Project
FortiGate SD-WAN Deployment
Deploy enterprise SD-WAN with FortiGate featuring dual ISP failover, performance SLAs, application steering, and Zero Trust architecture integration.
- News
Mass Exploitation of Fortinet FortiGate Devices Underway
Security researchers warn of mass exploitation campaigns targeting Fortinet FortiGate firewalls. Over 50,000 devices believed to be compromised globally.