FortiBleed: 74,000 Fortinet Firewalls Just Left Their Front Doors Open
Oh, look—another security "oopsie" where Fortinet decided to let the whole world peek into their admin panels. It’s almost impressive how consistently companies can turn a fortress into a public park for hackers.
A massive list of administrative passwords for Fortinet firewalls has been leaked online, exposing roughly 74,000 devices that are currently active and connected to the internet. Security researcher Vladimir Dyachenko flagged the data, and independent verification confirms these are not dusty logs from years ago, but fresh credentials obtained from exported device configurations.
These exposed units represent roughly 50% of all internet-facing Fortinet firewalls globally. In a move that defies common sense, many of these administrative interfaces were left wide open to the public web. Attackers can now log in remotely, manipulate security settings, and plant backdoors to maintain persistent access to corporate networks.
While the exact method used to harvest these configurations remains a mystery—possibly a known vulnerability or a fresh zero-day—the impact is immediate. Companies are being urged to check their status via Hudson Rock and initiate a massive reset of admin credentials and VPN passwords immediately.
The sheer scale of this exposure turns the concept of "network security" into a polite suggestion rather than a standard. When half of the world's supposed gatekeepers forget to lock the gate, it makes one wonder if the digital locks are even worth the plastic they are printed on.
Source: DoublePulsar
Comments
This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.