Security News > 2024 > November > Fortinet VPN design flaw hides successful brute-force attacks
2024-11-21 14:38
A design flaw in the Fortinet VPN server's logging mechanism can be leveraged to conceal the successful verification of credentials during a brute-force attack without tipping off defenders of compromised logins. [...]
News URL
Related news
- Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces (source)
- PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack (source)
- 48,000+ internet-facing Fortinet firewalls still open to attack (source)
- IPany VPN breached in supply-chain attack to push custom malware (source)
- Week in review: 48k Fortinet firewalls open to attack, attackers “vishing” orgs via Microsoft Teams (source)
- Massive brute force attack uses 2.8 million IPs to target VPN devices (source)
- SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN (source)