FortiBleed cyber threat impacts 13 Namibian organizations

The Namibia Cyber Security Incident Response Team identified these organizations after becoming aware of the international threat. Communications Regulatory Authority of Namibia spokesperson Mufaro Nesongano stated that while there is no evidence of widespread compromise in Namibia, the incident underscores the need for proactive cybersecurity. FortiBleed affects systems using Fortinet infrastructure, potentially allowing cybercriminals to access company networks by impersonating authorized users if credentials like usernames, passwords, or VPN credentials are exposed.

Affected organizations were advised to reset administrator and VPN credentials, implement multifactor authentication, upgrade Fortinet devices, review firewall configurations for unauthorized changes, and conduct system compromise reviews. Nesongano commended organizations that swiftly implemented remediation steps and encouraged all entities with internet-facing infrastructure to regularly review their security posture. FortiBleed is associated with a Russian-speaking cybercriminal group that has reportedly stolen credentials from 74,000 VPN and firewall configurations worldwide.