Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
-
Researchers have disclosed a large-scale campaign targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The investigation uncovered artifacts indicating the operators behind this activity have gained access to numerous organizations worldwide and have attempted to further compromise some of the victims.
The campaign has reportedly exposed more than 70,000 credentials harvested from breached enterprise firewalls and VPN appliances, underscoring the risk posed by internet-facing edge devices that are often overlooked in security monitoring.
Key points from the disclosure:
- Targeted devices include Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls
- Over 70,000 credentials have been exposed through the campaign
- Operators have obtained access to numerous organizations globally
- Attackers have attempted further compromise against some victims
Organizations running internet-exposed firewalls or VPN appliances should review their perimeter devices for signs of unauthorized access, audit credentials associated with these systems, and ensure management interfaces are not unnecessarily exposed to the public internet.
Source: The Hacker News
Does your organization run any of these edge devices, and how are you verifying whether they've been affected?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login