Your firewall protects your company. What happens when an attacker becomes its administrator?
FortiBleed is still active.
The FBI and U.S. Secret Service are warning that attackers have compromised Fortinet firewalls and, in some cases, changed or deleted administrator accounts, effectively locking companies out of their own security infrastructure.
While much of the current attention is coming from North America, Swiss companies should not assume this is someone else's problem.
An internet-facing Fortinet firewall in Zürich is exposed to the same global threat landscape.
The bigger concern for management is that this is not simply a patching issue. Once attackers have established access, they can maintain persistence, target privileged accounts, move further into the network and potentially open the door to ransomware.
Patching a vulnerability does not necessarily remove an attacker who is already inside.
If your organisation operates Fortinet infrastructure, this is a good time to verify exposure, administrator accounts, VPN activity, configuration changes and indicators of compromise.
Elevate Systems AG helps Swiss companies identify these risks before they become business-critical incidents.
Cybersecurity should be tested before an attacker tests it for you.
Elevate Systems AG \| Zürich
Cybersecurity \| IT Infrastructure \| Medical IT
www.elevatesystems.ch \| 044 442 66 00