> TritonInfoSec News
Home / Aug 13, 2026 / Story
0
#10 Dark Reading general August 11, 2026 at 21:16 UTC

Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

By Rob Wright

AI Summary

The Gunra ransomware-as-a-service operation is actively targeting critical infrastructure using leaked Conti source code while exploiting known Fortinet firewall and VPN appliance vulnerabilities to bypass MFA. The group's success against high-value targets using old, unpatched flaws reinforces the persistent risk of delayed patching in OT and critical infrastructure environments.

Read full article → https://www.darkreading.com/cyberattacks-data-brea…

Relevance score: 77.0/100

# More from August 13

  1. 1
    Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days BleepingComputer
  2. 2
    Lazarus hackers exploited Windows zero-day to target defense firms BleepingComputer
  3. 3
    Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations The Hacker News
  4. 4
    Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access The Hacker News
  5. 5
    Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws The Hacker News
  6. 6
    Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS The Hacker News
  7. 7
    SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code The Hacker News
  8. 8
    Sandworm hackers target IT pros with trojanized WireGuard VPN client BleepingComputer
  9. 9
    DeadLock ransomware uses blockchain to resist infrastructure takedown BleepingComputer