Arctic Wolf Observes Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Configuration Changes Detected on Fortinet FortiGate Devices Arctic Wolf has identified malicious configuration changes occurring on Fortinet FortiGate devices via Single Sign-On (SSO) accounts. This incident highlights the importance of applying security patches promptly to mitigate vulnerabilities associated with these devices. 2 sources 27