A large-scale cyber espionage campaign dubbed “FortiBleed” has compromised more than 70,000 Fortinet firewalls and VPN gateways worldwide, exposing enterprise networks across 194 countries. The activity, first identified by security researcher Volodymyr Diachenko and further analyzed by Hudson Rock and Kevin Beaumont, reveals a coordinated effort targeting internet-exposed FortiGate management interfaces. The dataset contains 73,932 […]

The post FortiBleed Exploit Campaign Hits 70,000+ Fortinet Firewalls Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A long-running, stealthy campaign attributed to the China-nexus actor tracked as Velvet Ant has been found to include deeply engineered backdoors in the authentication stack: modified OpenSSH binaries and tampered PAM modules that exfiltrate credentials, record every executed command, and conceal attacker activity. The discovery, part of Sygnia’s Operation Highland investigation, reveals nearly a decade […]

The post Modified OpenSSH Binaries Let Velvet Ant Steal Passwords, Log Commands, and Hide Activity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A novel evolution of LLMjacking: a threat actor leveraging a publicly exposed Ollama model server as the reasoning engine for an automated, multi-stage offensive framework. Rather than using the model for chat or resale, the attacker integrated unauthenticated model inference into a VAPT-style pipeline that scans targets, maps vulnerabilities, synthesizes proof-of-concept exploits, and attempts command […]

The post Financially Motivated Hackers Turn Legitimate IT Tools Into Remote Access Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.