Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
FortiBleed FortiGate Credential Harvesting + Shai-Hulud npm Worm & AWS Bedrock Key-Jacking: OTX Detection Pack
Threat Summary Four concurrent OTX pulses published on 2026-10-07/08 reveal a maturing, multi-front credential-theft ecosystem in which stol...
ClearFake, PhantomPolia & FortiBleed: EtherHiding Stealer Chains and 86K+ Compromised FortiGate Credentials — OTX Detection Pack
Threat Summary Five concurrent OTX pulses paint a single, coherent picture: credential theft at industrial scale, increasingly laundered thr...
FortiBleed Campaign Still Active: FBI and Secret Service Warn Fortinet SSL VPN Exploitation Is Driving Lockouts and Ransomware — Detection and Remediation Guide
Federal Warning: FortiBleed Is Not a Historical Footnote The FBI and U.S. Secret Service have issued a fresh warning to Fortinet customers: ...
FortiBleed, TAG-195 MaaS, & TA458 RoundPress: OTX Pulse Analysis — Enterprise Detection Pack
FortiBleed, TAG-195 MaaS, & TA458 RoundPress: OTX Pulse Analysis Threat Summary Recent OTX pulses reveal a converging threat landscape invol...
CyberStrike Harvester & TAG-195 MaaS: Credential Harvesting & AI Supply Chain Attacks — OTX Pulse Analysis
Threat Summary A complex wave of credential theft and espionage activity has been identified across five distinct OTX pulses. The primary th...
Operation FortiBleed: Fortinet SSL VPN Credential Harvesting & GPU Cracking Infrastructure
Threat Summary The "FortiBleed" campaign represents a sophisticated, large-scale credential compromise operation specifically targeting inte...
FortiBleed Campaign: Active INC Ransom and Lynx Exploitation of FortiGate Devices
Introduction Defenders need to be on high alert. SOCRadar’s Threat Research Unit has confirmed a direct link between the large-scale FortiBl...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
FortiBleed Harvesters & Ghost Stadium Phish: OTX Pulse Analysis — Steganography & Credential Theft
FortiBleed Harvesters & Ghost Stadium Phish: OTX Pulse Analysis — Steganography & Credential Theft Excerpt: Three active threats: FortiBleed...