> TritonInfoSec News
Home / Jul 04, 2026 / Story
0
#4 SecurityWeek general July 02, 2026 at 12:34 UTC

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

By Ionut Arghire

AI Summary

Researchers have linked the FortiBleed campaign — which harvested credentials from hundreds of thousands of FortiGate firewalls via an exploited vulnerability — to active ransomware attacks conducted by the INC and Lynx ransomware operations. Attackers are also reportedly layering in exploitation of a Nextcloud zero-day bug. Organizations running FortiGate devices that haven't rotated credentials following FortiBleed exposure are at immediate risk of ransomware intrusion.

Read full article → https://www.securityweek.com/fortibleed-campaign-l…

Relevance score: 84.0/100

# More from July 04

  1. 1
    Medtronic Data Breach Impacts 3.8 Million People SecurityWeek
  2. 2
    Alleged Scattered Spider Hacker Extradited to US SecurityWeek
  3. 3
    Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices SecurityWeek
  4. 5
    CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability SecurityWeek
  5. 6
    New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure SecurityWeek
  6. 7
    European Parliament Member Investigating Spyware Was Hacked With Pegasus The Hacker News
  7. 8
    Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability SecurityWeek
  8. 9
    ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API The Hacker News
  9. 10
    New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android The Hacker News