Signal

Over 600 FortiGate firewalls compromised in ai-driven attacks

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-02-23 11:34 UTCUpdated 2026-02-23 11:41 UTC
rss
securityfortigate_firewalls_hacked
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
Overview

In a concerning development, over 600 FortiGate firewalls have been compromised in a series of AI-augmented attacks. Cybercriminals, utilizing off-the-shelf generative AI tools, have successfully exploited exposed ports and weak credentials to take control of these devices across 55 countries in just over a month. This incident highlights the growing sophistication of cyber threats and the need for enhanced security measures.

Score total
1.01
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • The incident occurred over a month, indicating a sustained attack campaign.
  • The use of AI tools marks a new level of sophistication in cybercrime.
  • Increased exposure of devices due to remote work and cloud services.
Why it matters
  • Highlights the vulnerability of widely used security devices.
  • Demonstrates the effectiveness of AI in cyber attacks.
  • Calls for improved security practices to protect against such threats.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • More than 600 FortiGate firewalls were compromised by cybercriminals using AI tools.
How sources frame it
  • The Register Security: neutral
  • SecurityWeek: neutral
All evidence
All evidence
AWS says more than 600 FortiGate firewalls hit in AI-augmented campaign
The Register Security · go.theregister.com · 2026-02-23 11:41 UTC
Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS
SecurityWeek · securityweek.com · 2026-02-23 11:34 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • The Register Security (1)
  • SecurityWeek (1)
Top origin domains (this list)
  • go.theregister.com (1)
  • securityweek.com (1)