FBI warns FortiBleed attackers are locking companies out of their own FortiGate firewalls

A joint advisory issued on October 6 says the operators sell network access to ransomware groups. No CVE is involved, so a firmware update will not evict them.