AI-Assisted Threat Actor Compromises 600+ FortiGate Devices Using MCP Server

The Hacker News·high signal

Russian-speaking low-skill actor used DeepSeek and Claude with custom ARXON MCP server to compromise 600+ FortiGate devices across 55 countries. No zero-days - just weak credentials and exposed management ports. AI as force multiplier for unsophisticated attackers.