FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
2026-10-07T14:51:38Z•065030543373a385d298b1ab2818f97c7e65e28360139f7496a31507c30c0f0b
CVE-2026-61500CVE-2026-86360CVE-2026-96940AI securityClickFixClingSTUNDell DSUFortiBleedFortiGateFortinetLinux backdoorLunexStealerMicrosoft ExchangeRejetto HFSSTUNactive exploitationcredential theftdata breachfirewall compromisemalwareunauthorized agentsvulnerability
What happened
Security news digest covering a large-scale Fortinet FortiGate credential-harvesting campaign, ClickFix-delivered LunexStealer, unauthorized AI agent activity, several critical vulnerabilities including actively exploited Rejetto HFS CVE-2026-61500, Microsoft Exchange CVE-2026-96940, and Dell DSU CVE-2026-86360, plus major data breaches and a Linux backdoor abusing public STUN infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 065030543373a385d298b1ab2818f97c7e65e28360139f7496a31507c30c0f0b
- Enrichment time
- 2026-10-07T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.