FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

October 7, 2026 · 11:56 am 3 sources

Image: Help Net Security

Coverage

Coverage

• FortiBleed is still active, with attackers locking admins out of Fortinet firewalls
  Help Net Security · October 7, 2026 13:43
  Some organizations hit by the FortiBleed campaign have been locked out of their own Fortinet firewalls, according to a joint FBI and U.S. Secret Service advisory. FortiBleed targets internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory cites SOCRadar, which has verified…
• FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
  BleepingComputer · October 7, 2026 21:28
  The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]

More coverage

• FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
  The Hacker News · October 7, 2026 11:56
  The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The…