Analysis of Reported Credential Compromise of FortiGate Devices

Collection of Fortinet PSIRT blog posts analyzing multiple FortiGate/FortiOS security issues and threat activity. Topics include reported credential compromise (referred to as “FortiBleed”), single sign-on (SSO) abuse, observed post‑exploitation techniques and data postings claiming compromised FortiGate configuration and VPN credentials, targeted abuse of advisory FG-IR-19-283, and broader guidance on responsible disclosure and patching. The feed references a CVSS Critical advisory FG-IR-23-097 / CVE-2023-27997 and provides mitigation/verification guidance for affected customers.