Active firewall and VPN exploitation threatens critical infrastructure

FortiBleed reportedly targeted about 86,000 FortiGate firewalls in 194 countries, enabling administrator lockouts, account creation, credential theft, and ransomware. A separate GlobalProtect authentication-bypass flaw is reportedly being exploited by Qilin and other ransomware actors for VPN access; organizations should verify exposure and follow vendor mitigation guidance.