The FBI and Secret Service describe FortiBleed as an ongoing credential-compromise campaign targeting Fortinet firewalls and VPN gateways. Attackers can use gained access to disable accounts or change passwords, potentially locking organizations out; the alert says remediation may require more than standard patching and password resets.
Why it matters
The attack chain has been observed as an initial entry point for ransomware affiliates, including INC/Lynx and Payload, according to the government warning.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
Exploitation · Helpnetsecurity
What happened
Attackers were observed attempting to exploit CVE-2026-21589, a critical arbitrary file access vulnerability in Atlassian self-managed Data Center products, one day after patches were released. Previdian reported that exploitation attempts against the vulnerability were hitting its honeypot network and published a list of attacker IP addresses.
Why it matters
The reported activity followed publication of a technical rundown of the flaw by watchTowr researchers and release of Atlassian patches.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
AI & Agents · Theregister Security
What happened
Anthropic merged Project Glasswing and its Cyber Verification Program into one offering with three tiers: Defense Access, Red Team Access, and Specialized Access. Anthropic says partners identified at least 129,000 verified software vulnerabilities between April and July 2026, while its open-source scanning found another 5,500 between April and October.
Why it matters
Anthropic reported 5,674 true-positive vulnerabilities, including 3,014 high-severity and 1,522 critical-severity findings; only 516 had been patched.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Evidence is visible. Uncertainty stays visible too.
Baitaphish separates source records from interpretations, labels AI-assisted enrichment, and avoids turning ingestion volume into unsupported claims about threats, prevalence, or risk.
