Fortinet Firewall Vulnerability: Implications for North East India

Cybersecurity company Arctic Wolf has reported a new wave of automated attacks targeting Fortinet FortiGate devices, exploiting an unknown vulnerability to create rogue accounts and steal firewall configuration data. This development is significant for businesses and organizations in North East India that rely on Fortinet firewalls for network security.

Automated Attacks and Unknown Vulnerabilities

The attacks, which started on January 15, 2026, exploit an unknown vulnerability in the devices' single sign-on (SSO) feature. The attackers create accounts with VPN access and export firewall configurations within seconds, indicating automated activity. This raises concerns about the potential for widespread, large-scale attacks.

Similarities with Previous Attacks

Arctic Wolf's advisory notes similarities between the current campaign and a campaign described by the company in December 2025, following the disclosure of a critical authentication bypass vulnerability (CVE-2025-59718) in Fortinet products. The company is yet to confirm whether the latest threat activity is fully covered by the patch that initially addressed this vulnerability.

Exposure and Potential Impact

According to Internet security watchdog Shadowserver, nearly 11,000 Fortinet devices in India have FortiCloud SSO enabled, making them potential targets for these attacks. If successful, attackers could gain unauthorized access to these networks, potentially leading to data breaches and other cybersecurity incidents.

What North East India Can Do

Until Fortinet fully patches FortiOS against these ongoing attacks, administrators can secure their firewalls by temporarily turning off the vulnerable FortiCloud login feature (if enabled). This can help block attacks and reduce the risk of unauthorized access.

Implications for the Broader Indian Context

The ongoing FortiGate attacks highlight the need for organizations across India to prioritize cybersecurity and stay vigilant against potential threats. As more businesses and government agencies adopt digital technologies, the risk of cyberattacks is likely to increase.

Looking Ahead

The cybersecurity landscape is constantly evolving, and organizations must stay informed about the latest threats and vulnerabilities. By staying up-to-date with security best practices, implementing robust security measures, and working closely with cybersecurity experts, businesses and organizations in North East India can help protect their networks and data from potential cyberattacks.