Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Edge Infrastructure Under Siege: Defending Ivanti, Fortinet, and Palo Alto Networks Perimeters Against Converging Threat Actors
Introduction For two years, the headlines have told a tidy story: China-nexus actors are hammering edge devices from Ivanti, Fortinet, and P...
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws: Detection and Hardening Guide for Critical Infrastructure Defenders
Introduction Cybersecurity and intelligence agencies from South Korea and the United States have issued a joint warning on Gunra, an encrypt...
CVE-2025-68686: Fortinet FortiOS Symlink Bypass — Detection and Remediation
CVE-2025-68686: Fortinet FortiOS Symlink Bypass — Detection and Remediation On July 27, 2026, CISA added CVE-2025-68686 to the Known Exploit...
CISA KEV Alert: Active Exploitation of Fortinet FortiSandbox and Microsoft SharePoint Flaws
CISA Adds Critical Fortinet and Microsoft Flaws to KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded ...
Operation FortiBleed: Fortinet SSL VPN Credential Harvesting & GPU Cracking Infrastructure
Threat Summary The "FortiBleed" campaign represents a sophisticated, large-scale credential compromise operation specifically targeting inte...
CISA Emergency Directive: Active Exploitation of Fortinet FortiSandbox
Introduction On Thursday, the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive ordering federal civilia...
CVE-2026-58644 & Fortinet Flaws: CISA KEV Detection and Remediation
CISA KEV Alert: Active Exploitation of Fortinet and SharePoint Vulnerabilities On July 16, 2026, CISA added three critical vulnerabilities t...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
FortiBleed Operation: Defending FortiGate Firewalls Against Large-Scale Credential Harvesting
Introduction Since February 2026, a massive credential-harvesting operation dubbed FortiBleed has been actively targeting over 430,000 Forti...