> TritonInfoSec News
Home / Oct 08, 2026 / Story
0
#1 The Hacker News general October 07, 2026 at 11:56 UTC

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

By [email protected] (The Hacker News)

AI Summary

The FBI and Secret Service issued a joint warning that the FortiBleed credential harvesting campaign remains active, having already amassed 86,644 sets of credentials from internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling attackers to lock out legitimate administrators. Security teams running exposed FortiGate devices should immediately audit credentials and review authentication configurations.

Read full article → https://thehackernews.com/2026/10/fbi-warns-fortib…

Relevance score: 88.0/100

# More from October 08

  1. 2
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details The Hacker News
  2. 3
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances The Hacker News
  3. 4
    Hackers hijack Google domains after breaching ccTLD registries BleepingComputer
  4. 5
    ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security
  5. 6
    Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach The Record
  6. 7
    US posts $10 million reward for accused Chinese ‘Hafnium’ hacker The Record
  7. 8
    100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer The Hacker News
  8. 9
    Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer The Hacker News
  9. 10
    Chrome 155 Update Patches 247 Vulnerabilities SecurityWeek