Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Operation FortiBleed: Fortinet SSL VPN Credential Harvesting & GPU Cracking Infrastructure
Threat Summary The "FortiBleed" campaign represents a sophisticated, large-scale credential compromise operation specifically targeting inte...
CISA Emergency Directive: Active Exploitation of Fortinet FortiSandbox
Introduction On Thursday, the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive ordering federal civilia...
CVE-2026-58644 & Fortinet Flaws: CISA KEV Detection and Remediation
CISA KEV Alert: Active Exploitation of Fortinet and SharePoint Vulnerabilities On July 16, 2026, CISA added three critical vulnerabilities t...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
FortiBleed Operation: Defending FortiGate Firewalls Against Large-Scale Credential Harvesting
Introduction Since February 2026, a massive credential-harvesting operation dubbed FortiBleed has been actively targeting over 430,000 Forti...
Defending Against FortiBleed: Detecting Custom Sniffers on FortiGate Firewalls
Introduction Security practitioners are facing a sophisticated evolution in perimeter threats. SOCRadar has identified a large-scale campaig...
FortiBleed Campaign: Defending Against Credential Harvesting on Fortinet Devices
Introduction A critical mass of valid credentials is the golden ticket for attackers. In the latest "FortiBleed" campaign, threat actors hav...
FortiBleed Credential Leak: Active Exploitation and Hardening Guide for Fortinet Devices
FortiBleed Credential Leak: Active Exploitation and Hardening Guide for Fortinet Devices By Senior Security Consultant, Security Arsenal On ...
FortiBleed: Defending Against Industrial-Scale Fortinet VPN Credential Spraying
Introduction Security researcher Volodymyr “Bob” Diachenko recently disclosed "FortiBleed," a startling exposure of a cybercriminal infrastr...