Who is affected
Organizations running internet-facing Fortinet FortiGate firewalls and SSL VPN gateways, particularly those using legacy SHA-256 password storage or reused credentials.
How to mitigate it
- 1Reset passwords immediately across all Fortinet firewalls, VPN accounts, and administrative portals.
- 2Enforce multi-factor authentication on all remote access and administrative interfaces.
- 3Upgrade device configurations to eliminate legacy SHA-256 password storage.
- 4Review firewall and VPN access logs for unusual login activity or unfamiliar IP addresses.
How Outsource IT solves this
Managed Cybersecurity & Threat Protection provides 24/7 identity protection and monitoring to detect and intercept unauthorized network logins using stolen credentials.
Managed Cybersecurity & Threat ProtectionTags
Source advisory: the-hacker-news
Not sure whether this affects your business?
Outsource IT has been delivering managed services for over 20 years from Burlington, Ontario, supporting organizations right across Canada. Ask our team to review your exposure.
More security briefings
Oct 13, 2026
Critical SAP Cloud SDK Flaw Risks Exposure of Login CredentialsOct 13, 2026
AI Accelerates How Attackers Escalate Access Using Stolen AccountsOct 13, 2026
Critical Flaws in MarkLogic Database Allow Low-Level Users to Gain Admin Control


