As cited
Copy frozen at (site build).
threat intel
A Coordinated Brute Force Campaign Targets Fortinet SSL VPN
GreyNoise detected a coordinated brute force campaign against Fortinet SSL VPN on August 3rd, 2025, with over 780 unique IPs engaging in attack traffic. This represents the highest single-day volume of such activity observed in recent months.
Why it matters: Organizations running Fortinet SSL VPN should immediately verify account security, review login logs for unauthorized access attempts, and implement rate limiting or IP blocking to defend against this active threat campaign.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
A Coordinated Brute Force Campaign Targets Fortinet SSL VPN
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
A Coordinated Brute Force Campaign Targets Fortinet SSL VPN
On August 3, 2025, GreyNoise detected a coordinated brute force attack against Fortinet SSL virtual private networks (VPNs), with over 780 unique IP addresses launching exploitation attempts in a single day. This volume represents the highest single-day attack rate recorded against this target in recent months.
Why it matters: Organizations running Fortinet SSL VPN endpoints face immediate credential compromise risk from this active campaign and should enforce strong password policies, multifactor authentication (MFA), and rate limiting to block brute force attempts.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
A Coordinated Brute Force Campaign Targets Fortinet SSL VPN
On August 3, 2025, GreyNoise detected a coordinated brute force attack against Fortinet SSL virtual private networks (VPNs), with over 780 unique IP addresses launching exploitation attempts in a single day. This volume represents the highest single-day attack rate recorded against this target in recent months.
Why it matters: Organizations running Fortinet SSL VPN endpoints face immediate credential compromise risk from this active campaign and should enforce strong password policies, multifactor authentication (MFA), and rate limiting to block brute force attempts.
- Source published
- First seen by Cybersecurity Tracker