How the FortiBleed Credential Harvesting Campaign Compromised 430,000 FortiGate Firewalls
A Russian-speaking initial access broker group is behind a large-scale credential-harvesting operation called FortiBleed that has targeted over 430,000 FortiGate firewalls globally since February 2026.