Fortinet Responds to FortiBleed Campaign

Fortinet has confirmed that a large-scale campaign called FortiBleed, which has compromised over 86,000 device credentials across 194 countries, does not exploit new vulnerabilities but instead relies on credential reuse from previous breaches and brute-force attacks against weak passwords. The company says the attacks leverage previously disclosed authentication bypass flaws that were patched in late 2024 and early 2025, emphasizing that the campaign targets devices with poor password hygiene and no multi-factor authentication. Fortinet is notifying affected customers and working with law enforcement, while urging users to rotate credentials, implement MFA, and restrict external management access.