Malware & Threats FortiBleed Attackers Locking Victims Out of Fortinet Devices Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. Ionut ArghireOctober 8, 2026
Network Security FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware attacks by the INC and Lynx operations. Ionut ArghireJuly 2, 2026
Cybercrime Russian Initial Access Broker Behind FortiBleed Campaign Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026. Ionut ArghireJune 23, 2026
Network Security Fortinet Responds to FortiBleed Campaign A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign. Ionut ArghireJune 22, 2026
Malware & Threats FortiBleed: 86,000 Fortinet Device Credentials Compromised The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs. Ionut ArghireJune 19, 2026
Vulnerabilities 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking. Eduard KovacsJune 17, 2026