Fortinet zero-day allows hackers to access corporate networks

Fortinet has issued a warning about a critical zero-day vulnerability, CVE-2024-55591, that allows hackers to exploit firewalls and penetrate corporate networks.

Hackers are actively leveraging the CVE-2024-55591 vulnerability to take over FortiGate firewalls, creating unauthorized admin accounts that compromise corporate security.

Arctic Wolf highlighted an ongoing attack campaign against Fortinet firewalls since mid-November, emphasizing the urgency of disabling management access on public interfaces.

To protect against ongoing threats, Fortinet advises minimizing exposure by disabling management interfaces or restricting access through local-in policies, ensuring stronger firewall security.

Read at Techzine Global