Hacker knackt 600 Firewalls in einem Monat – mit KI

Summary

AWS security researchers report that a Russian-speaking attacker compromised more than 600 FortiGate firewalls between January 11 and February 18, 2026, without exploiting any FortiGate vulnerabilities, by targeting devices with weak passwords. The attacker then used a Google Gemini-based AI tool to reach further devices on the victims' networks and deployed a reconnaissance tool written in Go and Python, whose source code analysis suggested AI-assisted development. The affected firewalls are located in more than 55 countries.

Mitigation

The source states that the best protection is to use strong passwords and enable multi-factor authentication (MFA). It also notes the attacker repeatedly failed against patched or hardened systems.

Related items

• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSame vendor · BleepingComputer
• InfoGoogle is launching a one-stop Gemini agent for your work tasksSame vendor · The Verge (AI)
• MediumUAT-11985: AI-assisted event lures delivering real-time Google AitM phishingSame vendor · Cisco Talos Blog
• MediumTop MCP security resources — October 2026Same vendor · Adversa AI Blog
• InfoThe Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute VideosSame vendor · Wired (Security)