CyberzSOC

Credential stuffing is a method where attackers use passwords stolen from one web service to try to access accounts on other services, taking advantage of any reuse of username and password combinations. Organisations using these products should prioritise investigating whether they have been affected and, as soon as possible, follow mitigation advice to help defend against the threat. Use one of the FortiBleed asset checkers for any domains that may have been affected: Hudson Rock’s FortiBleed Checker device and monitor their network for unusual activity. Fortinet has published a blog post providing guidance and an analysis. Check SOCRadar's FortiBleed Checker or Hudson Rock’s FortiBleed Checker for any domains that are not listed in their 2.