// Latest Report
Latest · June 18, 2026 (Breaking Update)
FortiBleed — Industrial-Scale Credential Compromise Exposes ~75,000 Fortinet Firewalls Across 194 Countries
A global credential-compromise campaign exposed working administrator and SSL VPN credentials for ~75,000 Fortinet FortiGate firewalls across 194 countries, including Oracle, Chevron, Samsung, Foxconn, Siemens, PwC, Accenture, and a Turkish NATO defense contractor. Attackers harvested configuration files and cracked legacy SHA-256 password hashes offline using a 45-GPU cluster. No new CVE or zero-day is confirmed as the cause — Fortinet disputes the "new incident" framing. First-ever finding under Category C (Credential Compromise / Brute Force). Same-day breaking supplemental to the regular June 18 report.
1
Critical
1
Cred. Compromise
0
IOC Sets
—
Actors
// All Reports — Most Recent First
June 18, 2026 (Breaking)
⚡ Breaking
Threat
FortiBleed — ~75,000 Fortinet Firewalls Compromised via Mass Credential Harvesting Across 194 Countries
1
Critical
1
Cred. Compromise
0
IOC Sets
1
Findings
June 18, 2026
● New
Threat
Mastra npm Supply-Chain Attack — 144 AI Framework Packages Backdoored via "easy-day-js" Typosquat
1
Critical
1
LotL
1
IOC Sets
1
Findings
June 17, 2026
Threat
DragonForce Ransomware Weaponizes Microsoft Teams TURN Relay Infrastructure for Covert C2
1
Critical
1
LotL
1
IOC Sets
1
Findings
June 16, 2026
Threat
WordPress CDN Supply-Chain Attack — OptinMonster, TrustPulse, PushEngage Compromised via Awesome Motive CDN
0
Critical
1
High
1
IOC Sets
1
Findings
June 8, 2026
● New
Threat
Meta HTS AI Chatbot — 20,225 Instagram Accounts Hijacked via Password Reset Bypass
0
Critical
1
High
0
IOC Sets
1
Findings
June 5, 2026
Threat
Cisco SD-WAN Zero-Day + SolarWinds Serv-U DoS — Active Exploitation Campaigns Confirmed
0
Critical
2
High
1
IOC Sets
2
Findings
June 2, 2026
Threat
Device Code Phishing Surge — EvilTokens / Tycoon2FA PhaaS Pivot + Gemini IPI Disclosure
1
Critical
1
High
2
IOC Sets
2
Findings
May 21, 2026
Threat
Storm-2949 Azure Cloud Exfiltration · Tycoon2FA OAuth Device Code Pivot
1
Critical
2
High
3
IOC Sets
3
Findings
May 20, 2026
Threat
CloudZ RAT Abuses Windows Phone Link · QR Code Quishing Wave Targets Finance Sector
0
Critical
2
High
1
IOC Sets
2
Findings
May 19, 2026
Threat
Microsoft Reveals AiTM "Code of Conduct" Campaign — 35,000 Users Across 13,000 Orgs
1
Critical
1
High
2
IOC Sets
2
Findings
May 18, 2026
Threat
TA4903 BEC Campaign · Fox Tempest Malware Signing via MSaaS Platform
0
Critical
3
High
2
IOC Sets
3
Findings