Fortinet FortiGate devices hit in automated attacks which create rogue accounts and steal firewall data

Best free Linux firewalls.

• Hackers exploit Fortinet FortiGate SSO bug to steal firewall configuration data
• FortiOS 7.4.10 patch incomplete; new versions planned to fully fix vulnerability
• Stolen firewall data exposes network topology, VPNs, and security rules for further attacks

Cybercriminals seem to be taking advantage of a hole in a recent patch for Fortinet FortiGate instances, and are exploiting the vulnerability to create administrator accounts and steal firewall configuration data.