Analysis of Single Sign-On Abuse on FortiOS

Collection of Fortinet PSIRT blog posts analyzing multiple incidents and exploitation trends impacting Fortinet products. Topics include observed single sign-on (SSO) abuse on FortiOS, post‑exploitation techniques used by threat actors, observed abuse of advisory FG-IR-19-283, threat actor data postings claiming compromised FortiGate configs/VPN credentials, and the exploitation of known N‑day vulnerabilities. The feed includes references to Fortinet advisories and CVE-2023-27997 (noted as CVSS Critical) and CVE-2022-39952, guidance for administrators to confirm impact and mitigate risk, IoCs,