Fortinet credential attacks: investigating exposure and restoring trust after FortiBleed reports
NCSC and Fortinet describe credential attacks against FortiGate and VPN services. Investigations must distinguish exposed credentials from compromise and preserve evidence before recovery.