Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7) +--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445) +---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89) +---- Thread: Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations (/showthread.php?tid=6318783)

Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations - Stanley - Jan 30, 2026 Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations Cybersecurity company Arctic Wolf has warned of a "new cluster of automated malicious activity" that involves unauthorized firewall configuration changes on Fortinet FortiGate devices. The activity, it said, commenced on January 15, 2026, adding it shares similarities with a December 2025 campaign in which malicious SSO logins on FortiGate appliances were recorded against the admin account from https://thehackernews.com/2026/01/automated-fortigate-attacks-exploit.html RE: Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations - Moooookie - Jan 31, 2026 That could be rather concerning, especially automated changes to firewalls. Shows how risky weak sso setups can be when left unchecked.