Hudson Rock Reports 2,732 FortiBleed Disclosures and Global CERT Response
Summary
Hudson Rock says it processed 2,732 ethical disclosures after its FortiBleed report, shared data with national CERTs, and added the dataset to Cavalier, its API and a free lookup portal. It says NCSC, CISA and INCD issued guidance using its intelligence.
Key points
- Hudson Rock says its FortiBleed report received more than 100,000 views in 48 hours.
- The company reports completing 2,732 ethical disclosures for organizations it says were exposed.
- Hudson Rock says it shared localized data with national CERTs, which mobilized to notify and protect entities.
- The article says the UK’s NCSC, U.S. CISA and Israel’s INCD issued guidance using Hudson Rock’s intelligence.
- Hudson Rock says it integrated the FortiBleed dataset into its Cavalier platform and API.
- The company launched a free portal for organizations to check whether their domains appear in the dataset and request an ethical disclosure.
Article Details
- Event Type
- Coordinated disclosure and response following the reported FortiBleed/Fortinet compromise
- Impact
- Hudson Rock reported more than 100,000 report views within 48 hours and 2,732 ethical disclosures to exposed organizations. It said national CERTs mobilized to notify affected entities, and the UK NCSC, U.S. CISA, and Israel INCD issued guidance using its intelligence. Hudson Rock integrated the dataset into Cavalier and its API and launched a free lookup portal for organizations to check whether their domains appeared in the compromised dataset.
Vendors
FortinetHudson Rock reported an unprecedented response to the FortiBleed/Fortinet compromise, with over 100,000 views, thousands of ethical disclosures, and rapid action from SOC teams and CERTs worldwide.Hudson RockHudson Rock reported an unprecedented response to the FortiBleed/Fortinet compromise, with over 100,000 views, thousands of ethical disclosures, and rapid action from SOC teams and CERTs worldwide.
Products
Countries
IsraelCybersecurity and Infrastructure Security Agency (CISA), and the Israel National Cyber Directorate (INCD).United KingdomOfficial guidance leveraging our intelligence was issued by leading national authorities, including the UK’s National Cyber Security Centre (NCSC), the U.S.United StatesOfficial guidance leveraging our intelligence was issued by leading national authorities, including the UK’s National Cyber Security Centre (NCSC), the U.S.