There were reports today of @SophosXOps and other vendors being impacted by FortiBleed. We have posted our early analysis here: https://www.sophos.com/en-us/security-advisories/fortinet-fortibleed-credential-exposure-and-sophos-vpn-bruteforcing-campaign
TLDR; so far no evidence of an exploit in Sophos Firewall and no evidence of successful brute force against customers, we are still investigating to be sure.




