FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The FBI and Secret Service warned Tuesday that the FortiBleed credential harvesting campaign remains active, targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat actors to compromise devices. The agencies have amassed 86,644 Fortinet device credentials, indicating widespread exposure.