FortiGuard Outbreak Alerts
Tactical steps to mitigate the latest cybersecurity attacks
Contactez-nousNews on Outbreak Alert
As the threat landscape continues to evolve, we are seeing an increase in the sophistication of cyber-attacks as well as their ability to affect thousands of organizations in a single incident.
These are the situations where our customers and partners look to FortiGuard Labs to help them understand what happened, the technical details and how they can protect themselves from the attack and others like it. We do that through the FortiGuard Outbreak Alert. These are the Outbreak Alerts we are tracking:
Colonial Pipeline
Attack Type: Ransomware
Threat Actor: DarkSide
Operation Technology (OT) Attack. These actions temporarily halted all pipeline operations and affected some of their IT systems, causing gas shortages and taking weeks to recover.
F5 Big IP
Attack Type: Vulnerability Exploitation
Threat Actor: Multiple
F5 reported several new vulnerabilities under attack that could lead to complete system compromise. F5 urged immediate upgrades.
Microsoft Exchange
Attack Type: Vulnerability Exploitation and DearCry Ransomware
Threat Actor: HAFNIUM
The original Zero-Day vulnerabilities were exploited and used by the HAFNIUM group for the global Ransomware campaign
SolarWinds
Attack Type: Hack (Sunburst, Teardrop, Raindrop malware
Threat Actor: Russian Foreign Intelligence Service (SVR)
A complex & targeted supply chain cyber attack, with the primary goal of inserting a malicious backdoor into trusted (signed) software, which could later be exploited in end-customer updates of the SolarWinds Orion platform.
FortiGuard Outbreak Alerts
FortiGuard Outbreak Alerts will be the mechanism for communicating important information to customers and partners. When a cybersecurity incident/attack/event occurs that has large ramifications to the cybersecurity industry and affects numerous organizations, this page will be updated with a link to the individual FortiGuard Outbreak Alert. That Alert will include:
- An explanation of the attack, its timeline and what specific technology was affected
- Where applicable patches and/or mitigation recommendations can be found
- What Fortinet products, if deployed, would break the attack sequence
- What specific versions those Fortinet products need to be at to provide the protection
- Threat Hunting tools from Fortinet to help you determine if you were affected
- Related research from FortiGuard Labs