: Ensure your firmware is updated to versions that patch CVE-2022-40684 .
: Examine your firewall logs for any unauthorized administrative access dating back to late 2022. Configs Leaked.rar
The file is linked to a significant cybersecurity incident involving the Belsen Group (or a group using that name) that surfaced around mid-January 2025. : Ensure your firmware is updated to versions
: Investigations suggest the data was likely stolen in late 2022 . The leak is believed to be the result of attackers exploiting a specific authentication bypass vulnerability, CVE-2022-40684 , which allowed administrative access to affected FortiOS, FortiProxy, and FortiSwitchManager products. : Investigations suggest the data was likely stolen
The leak contains approximately and VPN credentials from Fortinet FortiGate firewalls . Key Details of the Leak
So the data was probably stolen in the fall of 2022, but where and how did the unknown attackers obtain the sensitive information? heise online
: Immediately change all administrative and VPN passwords.