Help Net Security2026-10-07 13:43:09

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S.

Summary

Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory cites SOCRadar, which has verified more than 86,644 compromised devices in 194 countries.

fbisocradarenterprisenewsfirewallfortinet

This is a brief wire summary, the full story (linked below) has the complete details.

KazaSec's take

Phishing and credential-based attacks succeed because they target people, not just infrastructure, technical controls like SPF, DKIM, and DMARC only ever close part of that gap. The rest comes down to whether a team can actually spot the fake, and whether a compromised credential can still be reused anywhere else.

Coverage details

Source: Help Net Security
Published: 2026-10-07 13:43:09
Author: sinisa markovic
Category: technology

We've archived 513 other articles touching the same topic (fbi, socradar, enterprise) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services