ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials

A single operator with basic skills used an open-source AI platform to breach 600+ FortiGate devices across 55 countries. No zero-days. Just weak passwords and an AI copilot. Full breakdown of CyberStrikeAI, the developer's MSS ties, and all 21 server IOCs.

Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries

AWS says more than 600 FortiGate firewalls hit in AI-augmented campaign

Fortinet Under Fire: Why Your Network Edge Remains Attackers' Favorite Entry Point

FortiGate firewalls hit by silent SSO intrusions and config theft

Fortinet admits FortiGate SSO bug still exploitable despite December patch

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls