FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

The FBI has issued a warning about ongoing FortiBleed attacks targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways. Threat actors are exploiting vulnerabilities in these devices to lock out legitimate administrators, preventing them from regaining access. The attacks are actively targeting organizations using Fortinet products for network perimeter defense. FortiBleed refers to a known vulnerability affecting FortiGate appliances that allows attackers to read sensitive data from memory. The FBI urges affected organizations to patch their systems immediately and review access logs for signs of compromise. Administrators who have been locked out should follow Fortinet's remediation guidance to restore access. The ongoing nature of these attacks suggests a coordinated and persistent threat campaign. Organizations relying on FortiGate VPN solutions are particularly at risk and should prioritize mitigation efforts.