{"id":275771,"date":"2026-06-19T02:47:00","date_gmt":"2026-06-19T06:47:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/19\/cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak\/"},"modified":"2026-06-19T05:45:27","modified_gmt":"2026-06-19T09:45:27","slug":"cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/19\/cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak\/","title":{"rendered":"CISA warns Fortinet users to secure devices after FortiBleed leak"},"content":{"rendered":"

CISA warns Fortinet users to secure devices after FortiBleed leak<\/a><\/p>\n

https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak\/<\/a><\/p>\n

Publish Date: 2026-06-19 02:47:00<\/a><\/p>\n

Source Domain: www.bleepingcomputer.com<\/a><\/p>\n

\n

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to secure their devices after nearly 74,000 firewall and VPN credentials were exposed in a data leak dubbed “FortiBleed.”<\/p>\n

This warning comes after threat actors used\u00a0compromised credentials\u00a0to target\u00a0internet-accessible Fortinet devices across government and private-sector organizations worldwide.<\/p>\n

“CISA is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials,” it said.<\/p>\n

\"image\"<\/p>\n

“This activity, referred to as FortiBleed, involves the exposure of leaked credentials associated with approximately 74,000 Fortinet devices, including firewalls and virtual private network (VPN) gateways.”<\/p>\n

The agency called on affected FortiGate appliance owners to terminate all SSL VPN and administrative sessions, reset all VPN and administrative passwords, enable phishing-resistant multifactor authentication, and review logs for signs of unauthorized access or lateral movement.<\/p>\n

CISA also advised Fortinet customers to store admin credentials using the modern Password-Based Key Derivation Function 2 (PBKDF2) hashing algorithm, and to restrict firewall management interfaces from public internet access and remove any unauthorized accounts to reduce the attack surface as much as possible.<\/p>\n

Credentials for over 73K firewalls exposed<\/h2>\n

The FortiBleed data leak was uncovered by security researcher Volodymyr “Bob” Diachenko, who discovered a server containing what appeared to be valid Fortinet VPN credentials, including usernames, email addresses, and plaintext passwords for 73,932 firewall URLs worldwide.<\/p>\n

The exposed data also includes each organization’s industry, revenue, and employee count, which Diachenko said appeared to be compiled to assist in planning future attacks.<\/p>\n

Threat intelligence company Hudson Rock, which also analyzed the dataset,…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

CISA warns Fortinet users to secure devices after FortiBleed leak https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak\/ Publish Date: 2026-06-19 02:47:00…<\/p>\n","protected":false},"author":1,"featured_media":275772,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2026\/06\/19\/Fortinet.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24,25],"class_list":["post-275771","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity","tag-phishing"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/275771"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=275771"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/275771\/revisions"}],"predecessor-version":[{"id":275773,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/275771\/revisions\/275773"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/275772"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=275771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=275771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=275771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}