Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2025-68686: Fortinet FortiOS Symlink Bypass — Detection and Remediation
CVE-2025-68686: Fortinet FortiOS Symlink Bypass — Detection and Remediation On July 27, 2026, CISA added CVE-2025-68686 to the Known Exploit...
CISA KEV Alert: Active Exploitation of Fortinet FortiSandbox and Microsoft SharePoint Flaws
CISA Adds Critical Fortinet and Microsoft Flaws to KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded ...
Operation FortiBleed: Fortinet SSL VPN Credential Harvesting & GPU Cracking Infrastructure
Threat Summary The "FortiBleed" campaign represents a sophisticated, large-scale credential compromise operation specifically targeting inte...
CISA Emergency Directive: Active Exploitation of Fortinet FortiSandbox
Introduction On Thursday, the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive ordering federal civilia...
CVE-2026-58644 & Fortinet Flaws: CISA KEV Detection and Remediation
CISA KEV Alert: Active Exploitation of Fortinet and SharePoint Vulnerabilities On July 16, 2026, CISA added three critical vulnerabilities t...
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain
FortiBleed to Lynx Ransomware: Detecting and Containing the Credential-Theft-to-Encryption Chain Introduction Security Arsenal is tracking a...
FortiBleed Operation: Defending FortiGate Firewalls Against Large-Scale Credential Harvesting
Introduction Since February 2026, a massive credential-harvesting operation dubbed FortiBleed has been actively targeting over 430,000 Forti...
Defending Against FortiBleed: Detecting Custom Sniffers on FortiGate Firewalls
Introduction Security practitioners are facing a sophisticated evolution in perimeter threats. SOCRadar has identified a large-scale campaig...
FortiBleed Campaign: Defending Against Credential Harvesting on Fortinet Devices
Introduction A critical mass of valid credentials is the golden ticket for attackers. In the latest "FortiBleed" campaign, threat actors hav...