EXPLORINEER
en

Archive — US — techcrunch

Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used bymajor companies all over the world

Cybercriminals have allegedly hacked over 30,000 Fortinet firewalls globally in an ongoing campaign dubbed 'FortiBleed'. The attacks exploit companies' failure to change default passwords, allowing hackers to access sensitive systems via automated scanning tools. Victims include major companies like Accenture and Samsung, with the most affected nations being the US, India, Taiwan, and Mexico, according to cybersecurity firms Hudson Rock and SOCRadar.

Key points

  • The hacking campaign named 'FortiBleed' targeted Fortinet firewalls and VPNs.
  • Attackers exploited users' neglect of changing default passwords, along with known credentials.
  • Over 73,000 unique Fortinet URLs have been compromised, and over 30,000 devices hacked.
  • Involved companies include Accenture, Comcast, Foxconn, Lenovo, Oracle, Samsung, Siemens, and PwC.
  • Mainly hit countries are India, the USA, Taiwan, and Mexico.
  • Industries impacted most are IT services, construction materials, telecommunications, and government agencies.
  • The hackers appear to be Russian-speaking, noting a shift from exploiting vulnerabilities to using leaked passwords.

Why it matters

  • The 'FortiBleed' incident reflects ongoing cybersecurity threats, enhancing the focus on IT security for companies.
  • In 2025, trends emphasize the need for better password management practices and proactive cybersecurity measures.
  • Historical attacks on Fortinet highlight a pattern where cybercriminals shift tactics to exploit human error in security protocols.
  • The rise of cybersecurity incidents drives increased investment and innovation in IT security solutions for scalable protection.

The widespread nature of the 'FortiBleed' attack illustrates the critical need for robust cybersecurity practices, emphasizing password management and vigilance against known vulnerabilities among all organizations.