Malicious Configuration Changes Detected on Fortinet FortiGate Devices

Malicious Configuration Changes Detected on Fortinet FortiGate Devices

First seen 23 Jan 2026, 22:10 UTC •ArcticwolfReddit •85% similarity •27.3

Article Content

Browse articles
ThreatCluster

Arctic Wolf has identified malicious configuration changes occurring on Fortinet FortiGate devices via Single Sign-On (SSO) accounts. This incident highlights the importance of applying security patches promptly to mitigate vulnerabilities associated with these devices.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Fortigate Fortinet FortiGate