Fortinet Fixes FortiOS Zero-Day Exploited by Attackers for Months

Fortinet says attackers exploiting the zero-day in the wild are creating randomly generated admin or local users on compromised devices and are adding them to existing SSL VPN user groups or to new ones they also add.