FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices - BTS #77

In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and best practices for defenders to mitigate such threats.

Key  topics

FortiBleed campaign details and impact Password hash vulnerabilities in FortiOS AI's role in analyzing large security breaches Credential harvesting techniques and defenses Importance of layered security and best practices Chapters

00:00 Introduction and Initial Thoughts on AI Models

10:04 Credential Harvesting and Security Weaknesses

19:58 Hash Management and Security Appliances

30:15 Incident Response and Vulnerability Management

39:46 The Future of Security in the Age of AI