There is a rumor about a new FortiGate vulnerability exploited in the wild from internet/external interfaces. FortiOS >=7.2.11 & >=7.4.7 is not affected.

Does anyone know something about that?

#infosec #fortigate

**joany** @joany@bsd.cafe · Mar 28

Mar 28

joany @joany@bsd.cafe

Friday at last.
Working with #fortigate wifi and #windows clients are tiresome and stressful sometimes..

But hey, i got #xfce4 .20 on my "new" #Freebsd
machine
#bhyve next

Good times

**Cedric** @cedric@fosstodon.org · Feb 11

Feb 11

Cedric @cedric@fosstodon.org

Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on #Fortinet #FortiGate Firewalls - Arctic Wolf

https://vulnerability.circl.lu/bundle/9a35bcae-d831-491f-945c-1fbd54769c38

CVE-2024-55591
CVE-2022-26118

vulnerability.circl.luBundle - Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls - Arctic WolfVulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

#Vulnerability #cve #VulnerabilityLookup

**Hackread.com** @Hackread@mstdn.social · Jan 20

Jan 20

Hackread.com @Hackread@mstdn.social

FortiGate Firewall Breach: #BelsenGroup leaks over 15,000 configurations, exposing usernames, passwords, and network rules - Update credentials now!

Read: https://hackread.com/belsen-group-leaks-fortigate-firewall-configurations/

Hackread - Latest Cybersecurity, Tech, Crypto & Hacking News · Jan 20Belsen Group Leaks 15,000+ FortiGate Firewall ConfigurationsFollow us on Bluesky, Twitter (X) and Facebook at @Hackread

#CyberSecurity #FortiGate #DataBreach

**Xavier «X» Santolaria** @0x58@infosec.exchange · Jan 18

Jan 18

Xavier «X» Santolaria @0x58@infosec.exchange

Latest issue of my curated #cybersecurity and #infosec list of resources for week #03/2025 is out!

It includes the following and much more:

➝ Data of 15K of #FortiGate Devices Dumped

➝ Biden's New Cyber Executive Order

➝ PlugX #Malware Deleted from over 4,200 Infected Systems

➝ Governments Call For #Spyware Regulations

Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end

https://infosec-mashup.santolaria.net/p/infosec-mashup-032025?r=299go8

X’s InfoSec Newsletter · Jan 18[InfoSec MASHUP] 03/2025By X’s InfoSec Newsletter

**decio** @decio@infosec.exchange · Jan 17

Jan 17

decio @decio@infosec.exchange

Si vous cherchez à évaluer un éventuel impact du leak des configurations #Fortigate de 2022
( https://doublepulsar.com/2022-zero-day-was-used-to-raid-fortigate-firewall-configs-somebody-just-released-them-a7a74e0b0c7f ),
les IP des instances FortiGate compromises à l'époque, ont été mis à disposition ici

https://github.com/arsolutioner/fortigate-belsen-leak/blob/main/affected_ips.txt

Un script pour organiser les adresse par AS et pays est disponible ici

https://github.com/cudeso/tools/tree/master/CVE-2022-40684

...et pour les amateurs d'oignons, quelqu'un a fait ça

https://any.run/report/8706c4029bec49e5ce81a41956a85c14b4a3855a791ee74b78699e7fb796c6a6/5427006e-3537-4142-99f3-2b25a594a51b

DoublePulsar · Jan 162022 zero day was used to raid Fortigate firewall configs. Somebody just released them.By Kevin Beaumont

#CyberVeille #Belsen #CVE_2022_40684

**grey** @grey@infosec.exchange · Jan 16

Jan 16

grey @grey@infosec.exchange

Is your SOC, manager, or CTI team asking for the FortiGate IPS? This wonderful person uploaded them. https://github.com/arsolutioner/fortigate-belsen-leak/blob/main/affected_ips.txt

Remember kids. CTI is a team sport and we're all on the same team. Sharing is caring. #CTI #OSINT #FortiGate #Leak

GitHubfortigate-belsen-leak/affected_ips.txt at main · arsolutioner/fortigate-belsen-leakResearch repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group - arsolutioner/fortigate-belsen-leak

**Dr. Christopher Kunz** @christopherkunz@chaos.social · Jan 16

Jan 16

Dr. Christopher Kunz @christopherkunz@chaos.social

@lawrenceabrams @GossiTheDog RE #FortiGate leak: I have found the version string "FWF61E-7.2.2-FW-build1327-220914" on one FortiWifi config from Colombia. I'm not sure which build date the first final version had but maybe a pre-release version?

Drag & drop to upload

Recent searches

Search options

Administered by:

Server stats:

#fortigate