08 October 2026 - 18:41

Category: Breach

Admins Locked Out Of Their Own Boxes

Over 86,000 Fortinet firewalls have been hijacked by attackers who politely deleted the real admins' accounts. Good luck explaining that lockout to management.

Admins Locked Out Of Their Own Boxes. Over 86,000 Fortinet firewalls have been hijacked by attackers who politely deleted the real admins' accounts. Good luck explaining that lockout to management.

Source: SecurityWeek

The Full Story

Severity: Critical Mood: Ridiculous

Why do we even bother setting up firewalls when attackers can simply brute-force their way into eighty-six thousand Fortinet devices across 194 countries? The intruders have helpfully solved our administrative workload by deleting original admin accounts entirely to ensure seamless lateral movement. Guarding against this absolute disaster requires preventing credential harvesting and putting an end to easily guessed administrative logins before the FBI has to break the news. Just another Tuesday in IT.

#AdminLockedOut #FortinetFails
Open article →