@_kqkk_: #خالد_علي

خالد علي
خالد علي
Open In TikTok:
Region: SA
Friday 06 December 2024 20:25:54 GMT
130906
5720
83
814

Music

Download

Comments

To see more videos from user @_kqkk_, please go to the Tikwm homepage.

Other Videos

FBI Issues Advisory on
FBI Issues Advisory on "FortiBleed" Campaign: 86,000+ Fortinet Appliances Compromised The FBI and the U.S. Secret Service have released a joint cybersecurity advisory regarding FortiBleed, an ongoing global credential-harvesting and initial access operation targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The attack has reportedly impacted over 86,644 devices across 194 countries. Authorities emphasize that FortiBleed is not driven by a newly disclosed zero-day vulnerability; rather, attackers are abusing leaked/reused credentials, weak password hygiene, and legacy password storage hashes to execute offline cracking and credential stuffing at scale. Key Highlights of the Threat * Admin Lockouts & Persistence: Attackers use valid credentials to access appliances, create rogue admin accounts (e.g., adminin, fortiAdmin, forticloud-sync), and in many cases delete or alter passwords for existing legitimate accounts—locking admins out entirely. * Gateway to Ransomware: The operation appears to be run by initial access brokers who monetize network access by packaging and handing off compromised gateways to ransomware affiliates (including INC, Lynx, and Payload ransomware). * Widespread Exposure: Management interfaces and SSL VPN endpoints exposed directly to the public internet remain the primary attack vectors. Immediate Recommended Mitigations * Restrict Management Access: Remove management interfaces from the public internet entirely, or strictly limit access via trusted hosts or local-in policies. * Terminate Sessions & Reset Passwords: Immediately terminate all active admin/VPN sessions and force password resets across all Fortinet appliances—especially those facing the internet. * Enforce Phishing-Resistant MFA: Implement multi-factor authentication across all administrative and remote-access portals. * Audit Device Accounts & Configs: Inspect user account lists for unauthorized additions, compare configurations against known-good backups, and review system logs for anomalies. #Cybersecurity #Fortinet #FortiGate #InfoSec #NetworkSecurity

About