MEDIUMVulnerability
Global

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

·Source: BleepingComputer

Updated:

Executive Summary

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]

Analysis

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
Source Attribution

Originally published by BleepingComputer on Oct 7, 2026.

Related Threats

MEDIUMVulnerabilityNEW

FBI and Secret Service Warn of FortiBleed Lockout Threat

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

Infosecurity Magazine
MEDIUMVulnerability

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice

The Hacker News
CRITICALVulnerability

NVD CRITICAL: CVE-2026-85097 — The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary ...

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated attacker can first obtain a valid nonce via the bricksforge_regenerate_nonce AJAX endpoint, then upload a

CVE-2026-85097
NIST NVD