PEERSTITCH Implant Followed FortiManager Breach Affecting 500-Plus Firewalls

Unit 42 has documented a 2024 intrusion in which attackers compromised a FortiManager appliance, took configuration and cryptographic material for more than 500 managed FortiGates, and later deployed the memory-residentโ€ฆ. A central management appliance can expose trust material for many downstream devices.

https://meta-news.info/ver/peerstitch-implant-fortimanager-breach-500-firewalls