CVE-2026-24858: Fortinet Vulnerability Exploited in FortiBleed Campaign
CVE-2026-24858 is a vulnerability in Fortinet products that was likely exploited by threat actors in the FortiBleed campaign to reuse credentials from…
Tag: FortiBleed
CVE-2025-59718: Fortinet Vulnerability Exploited in FortiBleed Campaign
CVE-2025-59718 is a vulnerability in Fortinet products that was likely exploited by threat actors in the FortiBleed campaign to reuse credentials from…
CVE-2025-59719: Fortinet Vulnerability Exploited in FortiBleed Campaign
CVE-2025-59719 is a vulnerability in Fortinet products that was likely exploited by threat actors in the FortiBleed campaign to reuse credentials from…
Russian-Speaking IAB Behind FortiBleed Credential Harvesting Campaign
A financially motivated Russian-speaking initial access broker (IAB) is assessed to be behind the FortiBleed campaign, which has targeted over 430,000 FortiGate…
SpyCloud: Cybersecurity Firm Tracking FortiBleed Credential Harvesting
SpyCloud provided a timeline of the FortiBleed campaign, noting that the FortiGate-related capture cycle began on May 19, 2026, and that the…
ZenoX: Brazilian Cybersecurity Firm Uncovering Planted Credentials in FortiBleed
ZenoX, a Brazilian cybersecurity company, found that certain username and password pairs were repeated across thousands of distinct IP addresses in the…
FortiOS: Fortinet Operating System
FortiOS is the operating system for Fortinet devices. The FortiBleed campaign exploited older SHA-256 hashing mechanisms in FortiOS versions prior to 7.2.11,…
Masscan: Network Scanning Tool Used in FortiBleed Reconnaissance
Masscan is a high-performance network scanning tool used in the reconnaissance stage of the FortiBleed campaign to identify vulnerable internet-facing FortiGate firewalls.
Shodan: Internet Device Search Engine Used in FortiBleed Reconnaissance
Shodan is an internet device search engine used in the FortiBleed campaign to identify vulnerable FortiGate firewalls exposed to the internet.
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…