FortiBleed

FortiBleed is a large, automated campaign that breaks into internet-facing Fortinet FortiGate firewalls and VPN gateways by trying known and leaked passwords on devices without multifactor authentication. It isn’t a flaw in Fortinet’s products. SOCRadar counted more than 86,000 compromised devices in 194 countries by June 2026, and in October the FBI warned that victims were being locked out of their devices and that ransomware affiliates were using the access.