18/06/2026
🚨 Security Advisory: Protecting Fortinet Firewalls and VPN Gateways
Threat actors are actively targeting Fortinet Firewalls and VPN gateways, largely utilizing exposed credentials and credential-based attacks. Left unchecked, these attacks can lead to full network compromise and further credential exposure across your organization.
At Pegasus Solves, we advise all organizations utilizing Fortinet infrastructure to take immediate, proactive steps to secure their environments.
How to Stay Secure: 6 Essential Mitigations
🔄 Rotate Credentials immediately: Force a mandatory password reset for all administrator and VPN accounts right away.
🛡️ Ensure Devices Are Patched: Update your firmware to the latest secure versions to prevent attackers from exploiting known vulnerabilities.
🚫 Restrict Management Interface Exposure: Reduce your attack surface. Ensure firewall admin and management interfaces are not internet-accessible unless absolutely necessary.
🔐 Enforce Multi-Factor Authentication (MFA): Implement MFA across all external-facing interfaces to neutralize the threat of stolen passwords.
🔑 Upgrade to PBKDF2 Hashing: Prevent offline brute-forcing of your credentials. Once your devices are fully updated, log back into all admin accounts to force the encryption format to upgrade to PBKDF2.
📊 Monitor and Examine Logs: Review your authentication and access logs regularly. Investigate any abnormal login locations, unusual hours, or unauthorized configuration changes.
The Bottom Line: Credential hygiene and robust perimeter defense are your best shields against these targeted campaigns. Don't wait for an incident to discover a vulnerability.
