AI Summary

CISA has issued a new alert after reports that malicious actors have targeted internet‑accessible Fortinet devices, a campaign dubbed FortiBleed. The activity has exposed leaked credentials linked to about 74,000 Fortinet devices, including firewalls and VPN gateways, across government and private sector organizations. CISA urges customers with FortiGate appliances and SSL VPN gateways to terminate all active SSL VPN and administrative sessions immediately. They should also reset all Fortinet VPN and administrative passwords, enforce strong password policies, and ensure secure credential storage. The alert now includes a link to Fortinet’s recent guidance on the issue.

AI summaries can be wrong sometimes—always verify important details using the source article.