Fortinet says attackers exploiting the zero-day in the wild are creating randomly generated admin or local users on compromised devices and are adding them to existing SSL VPN user groups or to ...

Fortinet has confirmed the existence of a critical ... naming scheme and adding those users to existing user groups with SSL VPN access. In some cases, they hijacked existing accounts or reset ...

Fortinet disclosed new vulnerabilities Tuesday ... into visiting a malicious attacker-controlled website through the SSL-VPN,” the company said. Additionally, a pair of high-severity ...

SSL VPN authentication through those accounts, and various other configuration changes.” Fortinet’s advisory for CVE-2024-55591 includes indicators of compromise (IOCs) and notes that the ...