Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data

The Gunra ransomware group exploits Fortinet VPN vulnerabilities to bypass MFA, steal enterprise data, and deploy double-extortion ransomware. A joint advisory from multiple US and South Korean agencies urges organisations to prioritise patching vulnerable VPN and RDP infrastructure and audit authentication logic against tampering.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 2 sources have reported it between 10 Aug 2026 and 12 Aug 2026.