FortiGate devices have been compromised in a global campaign using generative AI to exploit vulnerabilities.

More than 600 Fortinet FortiGate devices were compromised in a global campaign relying on generative AI to exploit exposed management ports and weak passwords. Attackers used commercial AI tools to plan attacks, generate scripts, and automate exploitation tasks across 55 countries. No software vulnerabilities were used; instead, misconfigurations and weak credentials enabled access, followed by credential harvesting and lateral movement. AWS attributed the activity to an unsophisticated but AI‑augmented threat actor operating at a scale previously requiring a larger skilled team.

Read more:

https://www.securityweek.com/hundreds-of-fortigate-firewalls-hacked-in-ai-powered-attacks-aws/