FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices - BTS #77

In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and best practices for defenders to mitigate such threats.

Key topics

• FortiBleed campaign details and impact
• Password hash vulnerabilities in FortiOS
• AI's role in analyzing large security breaches
• Credential harvesting techniques and defenses
• Importance of layered security and best practices

Chapters

00:00 Introduction and Initial Thoughts on AI Models 10:04 Credential Harvesting and Security Weaknesses 19:58 Hash Management and Security Appliances 30:15 Incident Response and Vulnerability Management 39:46 The Future of Security in the Age of AI