{"id":1714,"date":"2026-07-02T07:16:07","date_gmt":"2026-07-02T00:16:07","guid":{"rendered":"https:\/\/vncybers.vn\/cisa-canh-bao-chien-dich-fortibleed-hon-86-000-thiet-bi-fortigate-bi-lo-thong-tin-dang-nhap\/"},"modified":"2026-07-02T07:16:07","modified_gmt":"2026-07-02T00:16:07","slug":"cisa-canh-bao-chien-dich-fortibleed-hon-86-000-thiet-bi-fortigate-bi-lo-thong-tin-dang-nhap","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/cisa-canh-bao-chien-dich-fortibleed-hon-86-000-thiet-bi-fortigate-bi-lo-thong-tin-dang-nhap\/","title":{"rendered":"CISA c\u1ea3nh b\u00e1o chi\u1ebfn d\u1ecbch FortiBleed: H\u01a1n 86.000 thi\u1ebft b\u1ecb FortiGate b\u1ecb l\u1ed9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp"},"content":{"rendered":"

C\u01a1 quan An ninh C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 An ninh m\u1ea1ng Hoa K\u1ef3 (CISA) v\u1eeba \u0111\u01b0a ra c\u1ea3nh b\u00e1o kh\u1ea9n c\u1ea5p t\u1edbi ng\u01b0\u1eddi d\u00f9ng Fortinet v\u1ec1 m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn mang t\u00ean FortiBleed<\/strong>. Theo b\u00e1o c\u00e1o, t\u00ednh \u0111\u1ebfn cu\u1ed1i th\u00e1ng 6 n\u0103m 2026, th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a \u00edt nh\u1ea5t 86.644 thi\u1ebft b\u1ecb FortiGate \u0111\u00e3 b\u1ecb thu th\u1eadp v\u00e0 rao b\u00e1n tr\u00ean c\u00e1c di\u1ec5n \u0111\u00e0n ng\u1ea7m.<\/p>\n

\"CISA<\/p>\n

Chi\u1ebfn d\u1ecbch n\u00e0y kh\u00f4ng ch\u1ec9 nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng m\u1edbi m\u00e0 ch\u1ee7 y\u1ebfu khai th\u00e1c s\u1ef1 ch\u1ee7 quan c\u1ee7a qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng trong vi\u1ec7c qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u v\u00e0 duy tr\u00ec c\u00e1c c\u01a1 ch\u1ebf b\u1ea3o m\u1eadt l\u1ea1c h\u1eadu.<\/p>\n

Quy m\u00f4 v\u00e0 ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng t\u1ef1 \u0111\u1ed9ng h\u00f3a<\/h3>\n

D\u1eef li\u1ec7u t\u1eeb SOCRadar cho th\u1ea5y m\u1ed9t th\u1ef1c tr\u1ea1ng \u0111\u00e1ng b\u00e1o \u0111\u1ed9ng: c\u00e1c t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb m\u1eb7c \u0111\u1ecbnh (35%) v\u00e0 t\u00e0i kho\u1ea3n h\u1ec7 th\u1ed1ng t\u00edch h\u1ee3p s\u1eb5n (28,3%) chi\u1ebfm \u0111a s\u1ed1 trong s\u1ed1 c\u00e1c th\u00f4ng tin b\u1ecb r\u00f2 r\u1ec9. \u0110i\u1ec1u n\u00e0y ch\u1ee9ng t\u1ecf nhi\u1ec1u t\u1ed5 ch\u1ee9c v\u1eabn ch\u01b0a th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc c\u01a1 b\u1ea3n nh\u01b0 \u0111\u1ed5i t\u00ean t\u00e0i kho\u1ea3n m\u1eb7c \u0111\u1ecbnh ho\u1eb7c thay \u0111\u1ed5i m\u1eadt kh\u1ea9u xu\u1ea5t x\u01b0\u1edfng.<\/p>\n

C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt m\u00f4 t\u1ea3 FortiBleed<\/strong> l\u00e0 m\u1ed9t chi\u1ebfn d\u1ecbch c\u00f3 m\u1ee9c \u0111\u1ed9 t\u1ef1 \u0111\u1ed9ng h\u00f3a c\u1ef1c cao, di\u1ec5n ra theo hai giai \u0111o\u1ea1n ch\u00ednh:<\/p>\n

    \n
  1. D\u00f2 qu\u00e9t v\u00e0 t\u1ea5n c\u00f4ng:<\/strong> K\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 t\u00f9y ch\u1ec9nh \u0111\u1ec3 qu\u00e9t to\u00e0n b\u1ed9 Internet, t\u00ecm ki\u1ebfm c\u00e1c \u0111i\u1ec3m cu\u1ed1i \u0111\u0103ng nh\u1eadp t\u1eeb xa c\u1ee7a Fortinet. Sau \u0111\u00f3, ch\u00fang th\u1ef1c hi\u1ec7n t\u1ea5n c\u00f4ng v\u00e9t c\u1ea1n (brute-force) ho\u1eb7c nh\u1ed3i nh\u00e9t th\u00f4ng tin \u0111\u0103ng nh\u1eadp (credential stuffing) t\u1eeb c\u00e1c c\u01a1 s\u1edf d\u1eef li\u1ec7u r\u00f2 r\u1ec9 tr\u01b0\u1edbc \u0111\u00f3.<\/li>\n
  2. Gi\u00e1m s\u00e1t v\u00e0 m\u1edf r\u1ed9ng:<\/strong> M\u1ed9t khi \u0111\u00e3 chi\u1ebfm \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp, m\u00e3 \u0111\u1ed9c s\u1ebd l\u1eb7ng l\u1ebd gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng \u0111i qua thi\u1ebft b\u1ecb \u0111\u1ec3 thu th\u1eadp th\u00eam th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c trong m\u1ea1ng n\u1ed9i b\u1ed9, t\u1eeb \u0111\u00f3 m\u1edf r\u1ed9ng ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng.<\/li>\n<\/ol>\n

    C\u00e1c l\u0129nh v\u1ef1c b\u1ecb \u1ea3nh h\u01b0\u1edfng n\u1eb7ng n\u1ec1 nh\u1ea5t bao g\u1ed3m vi\u1ec5n th\u00f4ng, ch\u00ednh ph\u1ee7 v\u00e0 gi\u00e1o d\u1ee5c. C\u00e1c qu\u1ed1c gia ghi nh\u1eadn s\u1ed1 l\u01b0\u1ee3ng thi\u1ebft b\u1ecb l\u1ed9 l\u1ecdt l\u1edbn nh\u1ea5t l\u00e0 \u1ea4n \u0110\u1ed9, Hoa K\u1ef3, Mexico, Colombia v\u00e0 Th\u00e1i Lan.<\/p>\n

    L\u1ed7 h\u1ed5ng t\u1eeb c\u01a1 ch\u1ebf b\u0103m m\u1eadt kh\u1ea9u c\u0169<\/h3>\n

    M\u1ed9t chi ti\u1ebft k\u1ef9 thu\u1eadt \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 vi\u1ec7c k\u1ebb t\u1ea5n c\u00f4ng l\u1ee3i d\u1ee5ng c\u01a1 ch\u1ebf l\u01b0u tr\u1eef m\u1eadt kh\u1ea9u c\u0169. M\u1eb7c d\u00f9 Fortinet \u0111\u00e3 gi\u1edbi thi\u1ec7u thu\u1eadt to\u00e1n b\u0103m PBKDF2 an to\u00e0n h\u01a1n trong c\u00e1c phi\u00ean b\u1ea3n FortiOS g\u1ea7n \u0111\u00e2y (7.2.11, 7.4.8, 7.6.1), nh\u01b0ng khi n\u00e2ng c\u1ea5p t\u1eeb c\u00e1c phi\u00ean b\u1ea3n c\u0169, m\u1eadt kh\u1ea9u qu\u1ea3n tr\u1ecb vi\u00ean v\u1eabn \u0111\u01b0\u1ee3c l\u01b0u d\u01b0\u1edbi d\u1ea1ng b\u0103m SHA-256 c\u0169 cho \u0111\u1ebfn khi ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp l\u1ea1i l\u1ea7n \u0111\u1ea7u ti\u00ean sau khi n\u00e2ng c\u1ea5p.<\/p>\n

    Ch\u00ednh s\u1ef1 t\u1ed3n t\u1ea1i c\u1ee7a c\u00e1c b\u1ea3n b\u0103m SHA-256 y\u1ebfu h\u01a1n n\u00e0y \u0111\u00e3 t\u1ea1o \u0111i\u1ec1u ki\u1ec7n cho k\u1ebb t\u1ea5n c\u00f4ng d\u1ec5 d\u00e0ng b\u1ebb kh\u00f3a m\u1eadt kh\u1ea9u n\u1ebfu ch\u00fang thu th\u1eadp \u0111\u01b0\u1ee3c t\u1ec7p c\u1ea5u h\u00ecnh thi\u1ebft b\u1ecb.<\/p>\n

    Khuy\u1ebfn ngh\u1ecb kh\u1ea9n c\u1ea5p t\u1eeb CISA v\u00e0 Fortinet<\/h3>\n

    \u0110\u1ec3 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc chi\u1ebfn d\u1ecbch FortiBleed<\/strong>, VNCyberS<\/strong> t\u1ed5ng h\u1ee3p c\u00e1c b\u01b0\u1edbc h\u00e0nh \u0111\u1ed9ng c\u1ea7n thi\u1ebft m\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n th\u1ef1c hi\u1ec7n ngay l\u1eadp t\u1ee9c:<\/p>\n

      \n
    • L\u00e0m m\u1edbi to\u00e0n b\u1ed9 phi\u00ean l\u00e0m vi\u1ec7c:<\/strong> Ch\u1ea5m d\u1ee9t t\u1ea5t c\u1ea3 c\u00e1c phi\u00ean SSL VPN v\u00e0 phi\u00ean qu\u1ea3n tr\u1ecb \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/li>\n
    • \u0110\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u:<\/strong> Th\u1ef1c hi\u1ec7n thay \u0111\u1ed5i m\u1eadt kh\u1ea9u cho t\u1ea5t c\u1ea3 c\u00e1c t\u00e0i kho\u1ea3n VPN v\u00e0 t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng c\u00f4ng khai tr\u00ean Internet.<\/li>\n
    • C\u1eadp nh\u1eadt thu\u1eadt to\u00e1n b\u0103m:<\/strong> \u0110\u1ea3m b\u1ea3o h\u1ec7 th\u1ed1ng \u0111ang s\u1eed d\u1ee5ng thu\u1eadt to\u00e1n PBKDF2 \u0111\u1ec3 l\u01b0u tr\u1eef m\u1eadt kh\u1ea9u v\u00e0 lo\u1ea1i b\u1ecf c\u00e1c b\u1ea3n b\u0103m c\u0169.<\/li>\n
    • K\u00edch ho\u1ea1t MFA:<\/strong> Tri\u1ec3n khai x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) c\u00f3 kh\u1ea3 n\u0103ng ch\u1ed1ng t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o (phishing-resistant) tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c c\u1ed5ng truy c\u1eadp t\u1eeb xa.<\/li>\n
    • Ki\u1ec3m tra nh\u1eadt k\u00fd (Log):<\/strong> R\u00e0 so\u00e1t k\u1ef9 c\u00e1c b\u1ea3n ghi nh\u1eadt k\u00fd t\u01b0\u1eddng l\u1eeda, VPN v\u00e0 b\u1ed9 \u0111i\u1ec1u khi\u1ec3n t\u00ean mi\u1ec1n \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c d\u1ea5u hi\u1ec7u thay \u0111\u1ed5i c\u1ea5u h\u00ecnh tr\u00e1i ph\u00e9p ho\u1eb7c truy c\u1eadp t\u1eeb c\u00e1c \u0111\u1ecba ch\u1ec9 IP l\u1ea1.<\/li>\n
    • H\u1ea1n ch\u1ebf quy\u1ec1n qu\u1ea3n tr\u1ecb:<\/strong> Ch\u1ec9 cho ph\u00e9p truy c\u1eadp qu\u1ea3n tr\u1ecb t\u1eeb c\u00e1c m\u00e1y ch\u1ee7 tin c\u1eady (Trusted Hosts) ho\u1eb7c lo\u1ea1i b\u1ecf ho\u00e0n to\u00e0n vi\u1ec7c qu\u1ea3n tr\u1ecb qua giao di\u1ec7n c\u00f4ng khai tr\u00ean Internet.<\/li>\n<\/ul>\n

      S\u1ef1 vi\u1ec7c n\u00e0y m\u1ed9t l\u1ea7n n\u1eefa nh\u1eafc nh\u1edf v\u1ec1 t\u1ea7m quan tr\u1ecdng c\u1ee7a “v\u1ec7 sinh an ninh m\u1ea1ng” (cyber hygiene) c\u01a1 b\u1ea3n. Trong k\u1ef7 nguy\u00ean c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ef1 \u0111\u1ed9ng h\u00f3a, m\u1ed9t m\u1eadt kh\u1ea9u y\u1ebfu ho\u1eb7c vi\u1ec7c ch\u1eadm tr\u1ec5 c\u1eadp nh\u1eadt c\u1ea5u h\u00ecnh b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 bi\u1ebfn thi\u1ebft b\u1ecb ph\u00f2ng th\u1ee7 th\u00e0nh c\u00e1nh c\u1eeda m\u1edf toang cho t\u1ed9i ph\u1ea1m m\u1ea1ng.<\/p>\n

      VNCyberS<\/strong> compiled from The Hacker News and CISA<\/em><\/p>","protected":false},"excerpt":{"rendered":"

      C\u01a1 quan An ninh C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 An ninh m\u1ea1ng Hoa K\u1ef3 (CISA) v\u1eeba \u0111\u01b0a ra c\u1ea3nh b\u00e1o kh\u1ea9n c\u1ea5p t\u1edbi ng\u01b0\u1eddi d\u00f9ng Fortinet v\u1ec1 m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn mang t\u00ean FortiBleed. Theo b\u00e1o c\u00e1o, t\u00ednh \u0111\u1ebfn cu\u1ed1i th\u00e1ng 6 n\u0103m 2026, th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a \u00edt nh\u1ea5t […]<\/p>\n","protected":false},"author":2,"featured_media":1713,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1714","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1714"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1714\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1713"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}