FortiBleed Attackers Locking Victims Out of Fortinet Devices

October 6, 2026 · 8:19 am 5 sources

Image: BleepingComputer

Coverage

Coverage

• Engineer sentenced for locking over 3,000 devices on employer network
  BleepingComputer · October 6, 2026 08:19
  A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer's network in a ransomware-style attack. [...]
• FortiBleed is still active, with attackers locking admins out of Fortinet firewalls
  Help Net Security · October 7, 2026 13:43
  Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory cites SOCRadar, which has verified…
• FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
  BleepingComputer · October 7, 2026 21:28
  The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
• FortiBleed Attackers Locking Victims Out of Fortinet Devices
  SecurityWeek · October 8, 2026 07:52
  Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek .

More coverage

• FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
  The Hacker News · October 7, 2026 11:56
  The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The…