Cybersecurity articles tagged #FortiGate on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromisehttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromiseHackers compromised a Polish energy plant's OT network by exploiting a private APN misconfiguration, shutting down a steam turbine and water treatment system.Tue, 11 Aug 2026 00:59:03 GMTOT SecurityCritical InfrastructureFortiGatePrivate APNWAGO PLChttps://runtimerebel.com/blog/fortibleed-credential-theft-fuels-inc-lynx-ransomware-intrusionshttps://runtimerebel.com/blog/fortibleed-credential-theft-fuels-inc-lynx-ransomware-intrusionsAnalysis of the FortiBleed campaign, linking mass FortiGate credential theft to INC and Lynx ransomware operations for follow-on intrusions.Thu, 02 Jul 2026 10:44:52 GMTFortiBleedINC RansomwareLynx RansomwareFortiGateCredential TheftRansomwarehttps://runtimerebel.com/blog/fortibleed-110-million-credentials-harvested-via-fortigate-firewallshttps://runtimerebel.com/blog/fortibleed-110-million-credentials-harvested-via-fortigate-firewallsRussian-speaking threat actors harvest 110 million credentials from 430,000 FortiGate firewalls globally. Learn to detect and mitigate FortiBleed tactics.Tue, 23 Jun 2026 20:49:19 GMTFortiBleedFortiGateCredential HarvestingInitial Access BrokerFirewall Securityhttps://runtimerebel.com/blog/fortibleed-fortigate-firewalls-used-as-credential-stealershttps://runtimerebel.com/blog/fortibleed-fortigate-firewalls-used-as-credential-stealersThreat actors deploy Golang sniffers in the FortiBleed campaign, compromising 430,000 FortiGate firewalls to steal 110 million credentials globally.Tue, 23 Jun 2026 13:14:16 GMTFortiBleedFortiGateCredential TheftGolangFirewall Securityhttps://runtimerebel.com/blog/fortibleed-73932-fortigate-systems-exposed-credential-leak-analysishttps://runtimerebel.com/blog/fortibleed-73932-fortigate-systems-exposed-credential-leak-analysisAnalysis of the FortiBleed campaign, detailing the exposure of administrative and VPN credentials for over 73,000 Fortinet FortiGate firewalls and critical mitigation…Sat, 20 Jun 2026 05:36:54 GMTFortiBleedFortiGateFortinetCredential ExposureFirewall SecurityNetwork Securityhttps://runtimerebel.com/blog/fortibleed-data-leak-securing-fortinet-vpns-against-exposurehttps://runtimerebel.com/blog/fortibleed-data-leak-securing-fortinet-vpns-against-exposureCISA warns organizations after 74,000 Fortinet VPN credentials were leaked online. Learn how to mitigate the FortiBleed threat and secure your network.Fri, 19 Jun 2026 09:44:30 GMTFortinetFortiGateVPNCVE-2018-13379CISACredential Leakhttps://runtimerebel.com/blog/fortibleed-73000-fortinet-vpn-credentials-exposedhttps://runtimerebel.com/blog/fortibleed-73000-fortinet-vpn-credentials-exposedFortiBleed leak compromises Fortinet and FortiGate VPN credentials for over 73,000 firewall URLs globally, posing significant access risks.Thu, 18 Jun 2026 01:08:29 GMTFortiBleedFortinetFortiGateVPNCredentialsData Leakhttps://runtimerebel.com/blog/fortigate-raas-and-citrix-exploits-defensive-analysis-of-new-ttpshttps://runtimerebel.com/blog/fortigate-raas-and-citrix-exploits-defensive-analysis-of-new-ttpsAn analysis of the latest ThreatsDay bulletin covering FortiGate RaaS, Citrix exploits, and LiveChat phishing lures targeting perimeter security.Thu, 19 Mar 2026 16:24:11 GMTFortiGateCitrixRaaSLivechat PhishingMcp Abusehttps://runtimerebel.com/blog/fortigate-ngfw-exploitation-leads-to-service-account-credential-thefthttps://runtimerebel.com/blog/fortigate-ngfw-exploitation-leads-to-service-account-credential-theftThreat actors are exploiting FortiGate devices to extract configuration files and steal service account credentials, facilitating lateral movement in networks.Tue, 10 Mar 2026 20:12:12 GMTFortinetFortiGateNgfwCredential TheftFortioshttps://runtimerebel.com/blog/cyberstrikeai-leveraged-in-ai-driven-fortigate-attacks-across-55-countrieshttps://runtimerebel.com/blog/cyberstrikeai-leveraged-in-ai-driven-fortigate-attacks-across-55-countriesAn open-source AI platform, CyberStrikeAI, is deployed in sophisticated, AI-driven attacks targeting Fortinet FortiGate appliances globally.Tue, 03 Mar 2026 16:22:24 GMTCyberStrikeAIFortiGateAI Driven AttacksTeam CymruThreat ActorOpen Sourcehttps://runtimerebel.com/blog/automated-ai-driven-exploitation-of-fortigate-management-interfaces-in-aws-environmentshttps://runtimerebel.com/blog/automated-ai-driven-exploitation-of-fortigate-management-interfaces-in-aws-environmentsThreat actors are utilizing artificial intelligence to automate credential stuffing and exploit exposed administrative ports on Fortinet devices within AWS…Mon, 23 Feb 2026 12:21:29 GMTFortiGateAWSCredential StuffingAINetwork Securityhttps://runtimerebel.com/blog/ai-automated-campaign-targets-global-fortigate-edge-infrastructurehttps://runtimerebel.com/blog/ai-automated-campaign-targets-global-fortigate-edge-infrastructureA Russian-speaking threat actor leveraged generative AI to automate the compromise of over 600 FortiGate devices across 55 countries between January and February 2026.Mon, 23 Feb 2026 04:05:57 GMTFortiGateGenAICredential StuffingThreat IntelligenceNetwork Security