Analysis of Reported Credential Compromise of FortiGate Devices

Collection of Fortinet PSIRT blog posts summarizing analysis and mitigation guidance for multiple incidents affecting FortiGate/FortiOS devices: reported credential compromise (referred to as “FortiBleed”), single sign-on (SSO) abuse, observed abuse of advisory FG-IR-19-283, exploitation of resolved N-day vulnerabilities, threat actor data postings claiming leaked VPN/configuration credentials, and a CVSS Critical SSL‑VPN advisory (FG-IR-23-097 / CVE-2023-27997). Fortinet publishes IoCs, post‑exploitation analysis, and emphasizes patching, configuration review, and responsible disclosure to降低r