Hackers Gone Wild: FortiGate Devices Exposed in Massive Data Dump Disaster
A new hacking group, the Belsen Group, leaked sensitive data from over 15,000 FortiGate devices, exposing IP addresses and VPN credentials. They shared the data for free on the dark web, making it a cybercriminal’s buffet. Cybersecurity expert Kevin Beaumont links the leak to a 2022 zero-day vulnerability, CVE-2022–40684.
Hot Take:
Just when you thought your New Year’s resolution was going to be switching to a healthier diet, it turns out you’ll be switching all your passwords instead. Thank you, Belsen Group, for showing us that oversharing isn’t just for social media anymore. Looks like cybersecurity is the new black, and the fashion faux pas is having your VPN credentials exposed on the dark web. Who knew hackers could be such trendsetters?
Key Points:
- Belsen Group leaks 15,000 FortiGate devices’ sensitive data on the dark web.
- Data includes configuration files, IP addresses, and VPN credentials.
- The leak may be related to the CVE-2022–40684 zero-day vulnerability.
- The data dump is organized by country and device IP address.
- FortiGate admins advised to change credentials if not already done.
Already a member? Log in here