Gunra ransomware actors are exploiting two Fortinet vulnerabilities to target government and critical national infrastructure organizations, a joint advisory issued by US and Republic of Korea authorities has warned. Gunra is a ransomware-as-a-service (RaaS) which primarily exploits known vulnerabilities in internet-facing devices, including firewalls and VPN appliances, to gain initial access. Once in a network, affiliates conduct highly advanced persistence and lateral movement techniques, ultimately allowing for the stealthy exfiltration of large volumes of data from Microsoft 365 services. The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),…