FortiBleed credential-theft campaign linked to Lynx ransomware

Multiple high-impact incidents and campaigns reported: a large FortiBleed credential-theft operation has been tied to the INC group and Lynx ransomware, indicating harvested Fortinet credentials are being used to stage intrusions. The U.S. DHS confirmed a breach of the Homeland Security Information Network (HSIN), compromising a sensitive information-sharing platform. Kubota disclosed month-long unauthorized access to some network systems. A new ChocoPoC campaign uses trojanized GitHub PoC exploits to deliver a Python RAT targeting security researchers. Separately, attackers launched an 81M-at