Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Hackers exploited enterprise firewalls and VPNs, exposing over 70,000 credentials.
A large-scale campaign has been uncovered by cybersecurity researchers, targeting exposed network edge devices including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The attackers successfully breached these systems, leading to the exposure of over 70,000 credentials. Evidence suggests the campaign has impacted numerous organizations globally, with attempts to further compromise some victims.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Fortinet FortiGate?
Get an email when a new story names Fortinet FortiGate, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers exploited vulnerabilities in widely deployed network edge devices — Fortinet FortiGate and Palo Alto Networks GlobalProtect — to breach enterprise perimeters and harvest over 70,000 sets of credentials. These devices sit at the outermost layer of corporate networks, making them high-value targets whose compromise can grant attackers direct access to internal systems. The root cause lies in organizations failing to apply available patches and maintain rigorous vulnerability management for internet-facing appliances. This matters enormously because stolen credentials from perimeter devices can enable lateral movement, ransomware deployment, and prolonged undetected access across entire organizations.
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.