Hacker posts list of over 49,000 affected firewalls online
A hacker has published an exploit for a vulnerability (CVE-2018-13379) in Fortinet VPN devices that has been known for some time. The vulnerability enables attackers to steal login data using special http requests. They can then use these to break into networks and smuggle in ransomware. The list with the 49,000 thousand firewalls affected also belong to renowned banks, government agencies and other financial institutions in Switzerland. That is considerable and critical at the same time.
It seems that many companies still have a long patch cycle and are still unaware of which services and devices are on the Internet.
Help is provided by IT-Audits and firewalls that are not affected by such weak points from the outset and that go other ways. We can help you resolve the situation.