#fortinet
-
The k0t Campaign: Enterprise Firewalls Breached, 70,000+ Credentials Exposed
Researchers at Group-IB and NyxLab have detailed a large-scale campaign against internet-facing Fortinet and Palo Alto Networks edge devices. A threat actor known as k0t compromised organizations worldwide and harvested over 70,000 credentials.
-
FBI: FortiBleed Harvested 86,644 Fortinet Device Credentials and Is Still Active
The FBI and U.S. Secret Service warned that the FortiBleed credential-harvesting campaign remains an active threat to internet-facing Fortinet FortiGate firewalls and SSL VPN gateways.
-
Fortinet warns of critical FortiMail flaw already exploited in the wild
Fortinet has disclosed a critical FortiMail vulnerability with a CVSS score of 9.8 that attackers are exploiting as a zero-day. Patches are not yet available for every affected version.
-
Critical Vulnerability in Orkes Conductor: Unauthenticated RCE Exploited in Real-World Attacks
Fortinet reports active exploitation of the critical flaw CVE-2026-58138 in the Orkes Conductor workflow orchestration platform, which allows arbitrary commands to be executed without authentication.
-
US and South Korea Warn of Gunra Ransomware Attacks on Government Agencies
US federal agencies and South Korea's National Police Agency have urged government organizations and critical infrastructure facilities worldwide to defend themselves against the Gunra ransomware, which is built on leaked Conti code.
-
CISA orders urgent patching of vulnerabilities in Fortinet FortiSandbox
The CISA agency has ordered U.S. federal agencies to prioritize fixing two actively exploited vulnerabilities in the Fortinet FortiSandbox platform.