<![CDATA[Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials]]>Researchers have disclosed a large-scale campaign targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The investigation uncovered artifacts indicating the operators behind this activity have gained access to numerous organizations worldwide and have attempted to further compromise some of the victims.

The campaign has reportedly exposed more than 70,000 credentials harvested from breached enterprise firewalls and VPN appliances, underscoring the risk posed by internet-facing edge devices that are often overlooked in security monitoring.

Key points from the disclosure:

  • Targeted devices include Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls
  • Over 70,000 credentials have been exposed through the campaign
  • Operators have obtained access to numerous organizations globally
  • Attackers have attempted further compromise against some victims

Organizations running internet-exposed firewalls or VPN appliances should review their perimeter devices for signs of unauthorized access, audit credentials associated with these systems, and ensure management interfaces are not unnecessarily exposed to the public internet.

Source: The Hacker News

Does your organization run any of these edge devices, and how are you verifying whether they've been affected?

]]>https://xploitlk.com/topic/778/hackers-breach-enterprise-firewalls-and-vpns-exposing-over-70-000-credentialsRSS for NodeTue, 27 Oct 2026 07:22:12 GMTSat, 24 Oct 2026 18:30:18 GMT60