The FBI has issued a warning that ongoing FortiBleed exploits continue to target exposed Fortinet FortiGate firewalls and SSL VPNs, often resulting in legitimate administrators being locked out. Attackers leverage leaked credentials, credential stuffing, and password spraying to access these systems, then use advanced GPU-based tools to crack password hashes offline. The campaign has been linked to ransomware groups such as INC/Lynx and Payload, with over 86,000 devices affected since the leak was first discovered in June.
bleepingcomputer.com
· 2026-10-07
Fortinet has disclosed a critical path traversal vulnerability in FortiMail's management interface, scoring 9.8 on CVSS, that attackers are already exploiting to write arbitrary files without authentication. The flaw affects FortiMail versions 7.2 through 8.0.1, and was discovered internally by Fortinet's Product Security team. Patches are not yet available for most affected branches, though fixed versions are planned.
bleepingcomputer.com
· 2026-10-01
More than 100 companies, including OpenAI, Anthropic, Google, Microsoft, Crowdstrike, Okta and Fortinet, signed an open letter calling for coordinated action between industry and governments to counter AI-driven cyberattacks. The letter warns that increasingly capable AI models will soon enable more widespread and sophisticated attacks on critical infrastructure like hospitals and utilities, and urges new defensive partnerships across local, national and international levels.
techcrunch.com
· 2026-08-27
GoKawiil