The advisory from the cybersecurity company follows a report from security researchers who observed exploits in the wild in early December as part of a widespread campaign.

Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024.

Ransomware 'not off the table,' Arctic Wolf threat hunter tells El Reg Updated Miscreants running a "mass exploitation campaign" against Fortinet firewalls, which peaked in December, may be using an unpatched zero-day vulnerability to compromise the equipment,

Attackers are exploiting a new authentication bypass zero-day vulnerability in FortiOS and FortiProxy to hijack Fortinet firewalls and breach enterprise networks.

Hackers have leaked 15,000 Fortinet firewall configurations, which were apparently obtained as a result of exploitation of CVE-2022–40684.

A new threat actor has leaked configurations files and virtual private network (VPN) information for 15,000 firewall devices provided by security vendor Fortinet.

Fortinet firewalls running firmware versions 7.0.14-7.0.16 targeted by attackers using zero-day vulnerabilities.

Security researchers say "tens" of Fortinet devices have been compromised so far as part of the weeks-long hacking campaign.

Fortinet has disclosed a new critical zero-day vulnerability affecting some of its FortiGate firewalls. In a security advisory published on January 14, FortiGuard Labs revealed a new authentication bypass vulnerability affecting FortiOS and FortiProxy that could be exploited to hack FortiGate devices.

Arctic Wolf, a prominent cybersecurity firm, recently detected a widespread exploitation campaign targeting Fortinet FortiGate firewall devices. This campaign, tied to a critical vulnerability known as CVE-2024-55591,