Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
FortiGate Implant in Telecom Intrusion: Detecting and Evicting Stealthy Persistence on Fortinet Firewalls
The Incident: An Implant Hiding in the Perimeter Itself SecurityWeek reports that a persistent, stealthy implant deployed directly on FortiG...
FortiBleed Campaign Still Active: FBI and Secret Service Warn Fortinet SSL VPN Exploitation Is Driving Lockouts and Ransomware — Detection and Remediation Guide
Federal Warning: FortiBleed Is Not a Historical Footnote The FBI and U.S. Secret Service have issued a fresh warning to Fortinet customers: ...
Fortinet Edge Exploitation Hits Thai Broadband Provider: FortiGate Compromise Detection and Hardening Guide
Introduction SecurityWeek reports that a Thai broadband provider was compromised through a vulnerability in its Fortinet infrastructure. The...
Agentless Threat Detection for FortiGate: Exposing the Black Box of Virtual Appliances
Introduction Virtual appliances have become the "black boxes" of the modern enterprise infrastructure. Organizations deploy FortiGate and si...
FortiBleed Campaign: Active INC Ransom and Lynx Exploitation of FortiGate Devices
Introduction Defenders need to be on high alert. SOCRadar’s Threat Research Unit has confirmed a direct link between the large-scale FortiBl...
FortiBleed Operation: Defending FortiGate Firewalls Against Large-Scale Credential Harvesting
Introduction Since February 2026, a massive credential-harvesting operation dubbed FortiBleed has been actively targeting over 430,000 Forti...
Defending Against FortiBleed: Detecting Custom Sniffers on FortiGate Firewalls
Introduction Security practitioners are facing a sophisticated evolution in perimeter threats. SOCRadar has identified a large-scale campaig...
CISA FortiBleed Alert: Defending FortiGate Firewalls Against Active Exploitation
Introduction The cybersecurity landscape shifted abruptly this week with CISA’s urgent warning regarding a critical vulnerability—dubbed For...
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide Introduction Rapid7's recent Incident Response (IR) engagement ...