Campaign breaches Fortinet and Palo Alto edge devices, exposing 70,000 credentials

· Cybersecurity

Researchers disclosed a large-scale campaign targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls and VPNs. According to the findings, artifacts from the investigation indicate operators in the campaign obtained access to numerous organizations, and more than 70,000 credentials were exposed. Edge devices such as firewalls and VPN gateways sit at the perimeter of corporate networks, so compromise gives attackers a foothold for deeper intrusion. The disclosure adds to a run of attacks exploiting internet-facing security appliances, a category that defenders have repeatedly struggled to keep patched.

Why it matters：Perimeter appliances are the gateway to enterprise networks, so a campaign harvesting tens of thousands of credentials at once raises systemic breach risk across sectors.

Key points

  • Targets included Fortinet FortiGate and Palo Alto Networks GlobalProtect
  • Researchers say operators gained access to numerous organizations
  • The campaign is the latest against internet-facing security appliances

Sources (original reporting)

More stories from this day