Ep. 85 - FortiBleed: The Campaign With No CVE That Locks You Out of Your Own Firewall

The FBI and US Secret Service just dropped joint advisory JCSA 2026-1601 on FortiBleed — and there is no CVE to patch. Tova Dvorin and Adrian Culley walk the full chain: credential stuffing against internet-facing FortiGate SSL VPNs, legacy SHA-256 admin hashes cracked on rented GPUs, fake vendor-style admin accounts, and attackers deleting your accounts to lock you out of your own firewall. Plus the INC/Lynx ransomware link, what the 86,000 figure really means, and the question that matters: would a new admin on your edge device at 3am fire anything?

More info on FortiBleed, and SafeBreach coverage for it: https://www.safebreach.com/blog/fortibleed-fortigate-jcsa-20261006-01-safebreach-coverage/

#cybersecurity #infosec #CISO #FortiBleed #Fortinet #ransomware #CTEM #CriticalInfrastructure