An urgent patch fixes the critical CVE-2026-25089 FortiSandbox bug. Attackers can execute remote commands, so update your systems immediately.

The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.

Researchers say FortiBleed used stolen and tested credentials to access exposed Fortinet firewalls, putting major organizations and public agencies at risk now.

The FortiBleed campaign exposed working logins for 30,791 Fortinet firewalls across 194 countries. This Fortinet credential leak hits every sector.

The massive FortiBleed campaign has compromised tens of thousands of Fortinet firewalls worldwide, exposing global enterprises to credential theft.

FortiBleed began as mass password guessing. Then it grew into an attack chain, where hijacked firewalls gathered fresh credentials for the next breach. A new timeline shows that the published Fort…

The same week the agentic web was declared production-ready, credential exfiltration hit four different layers of the stack. Same root…

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.

The Scope of the FortiBleed Breach According to a report detailing how Russian hackers steal government logins, cybercriminals have successfully acquired the usernames and passwords of British gov…

TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect Fortinet FortiSandbox, and one affects Microsoft SharePoint. Federal agencies mus…