Hackers breach enterprise firewalls and VPNs, stealing over 70,000 credentials

Researchers detailed a large-scale campaign targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. Operators gained access to numerous organizations worldwide and exfiltrated more than 70,000 credentials, with attempts to further compromise some victims.

• Attackers targeted internet-exposed FortiGate and GlobalProtect firewalls
• More than 70,000 credentials were stolen
• Operators gained access to organizations worldwide
• Researchers observed attempts to further compromise victims