← Back to overview

A large-scale cyberattack campaign has targeted exposed network edge devices, specifically Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls and VPNs. Threat operators have successfully compromised numerous organizations worldwide, obtaining over 70,000 credentials in the process. Researchers investigating the campaign found artifacts indicating further compromise attempts against some victims. The campaign highlights ongoing risks associated with internet-exposed network perimeter devices. The scale and targeting of enterprise-grade security infrastructure makes this a significant threat to organizations globally.

Affected products

  • Fortinet FortiGate
  • Palo Alto Networks GlobalProtect

Categories

  • Data Breach & Exfiltration
  • Identity & Access
  • Network Infrastructure