2026-10-08: FBI and USSS warn the FortiBleed campaign is still active against FortiGate firewalls and SSL VPNs

Show Notes - 2026-10-08

Stories Covered: - Today: - FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials (https://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.html) - Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details (CVE-2026-21589) (https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html) - Silent Ransom Group Reportedly Earned Over $200M Without Encryption (https://databreaches.net/2026/10/07/can-you-really-make-more-than-200m-in-six-months-without-encrypting-victims-it-seems-silent-ransom-group-can/) - ShinyHunters Extorted Boeing Spin-off Prior to Arrests (https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/) - Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs (https://www.huntress.com/blog/screenconnect-power-bi) - SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances (https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html) - Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains (https://thehackernews.com/2026/10/attackers-hijack-gh-sl-and-as.html) - Evolution of Web3 in Cloud Supply Chain Attacks (https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks/) - Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer (https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html) - PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet (https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html) - Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely (https://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.html) - Microsoft, Adobe, Apple, and Foxit vulnerabilities (https://blog.talosintelligence.com/microsoft-adobe-apple-and-foxit-vulnerabilities/)

CVEs Referenced: CVE-2026-21589

Indicators of Compromise: Domains: dailylifeproject[.]site, vykyn[.]click, burnsworth[.]site, essaywritingservice[.]site, openpediatrics[.]site.

Full brief: https://carolinacleartech.com/brief/2026-10-08/