> TritonInfoSec News
Home / Jul 03, 2026 / Story
0
#2 The Hacker News general July 02, 2026 at 08:00 UTC

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

By [email protected] (The Hacker News)

AI Summary

The FortiBleed campaign — involving mass credential theft from FortiGate firewalls — has been directly linked to INC and Lynx ransomware operations, with an operator found actively working negotiation panels for both groups. Researchers confirm that credentials harvested from hundreds of thousands of FortiGate devices are being used to facilitate ransomware intrusions. Security teams managing Fortinet infrastructure should treat any exposed credentials as compromised and rotate them immediately.

Read full article → https://thehackernews.com/2026/07/fortibleed-crede…

Relevance score: 86.0/100

# More from July 03

  1. 1
    FBI Seizes NetNut Proxy Platform, Popa Botnet Krebs on Security
  2. 3
    SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation The Hacker News
  3. 4
    Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials The Hacker News
  4. 5
    AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack The Hacker News
  5. 6
    Cisco finally confirms attackers exploiting Unified CM flaw BleepingComputer
  6. 7
    New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos The Hacker News
  7. 8
    Hackers target Microsoft 365 accounts with 81 million login attempts BleepingComputer
  8. 9
    Spyware found on phone of European Parliament member probing it The Record
  9. 10
    Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities SecurityWeek