A Russian initial access broker (IAB) is targeting over 430,000 FortiGate firewalls as part of the FortiBleed credential-harvesting campaign, SOCRadar reports. Discovered last week, the campaign has been ongoing since at least February, and was initially believed to be Fortinet-exclusive.… Read More "Russian Initial Access Broker Behind FortiBleed Campaign"
Sarika Sharma Sarika, a cybersecurity enthusiast, contributes insightful articles to Fidelis Security, guiding readers through the complexities of digital security with clarity and passion. Beyond her writing, she actively engages in the cybersecurity community, staying informed about emerging trends and… Read More "CWPP Integration with Your Security Stack"
Ravie LakshmananJun 23, 2026Initial Access Broker / Firewall Security A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally. The… Read More "FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation"
The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 internal repositories. The breach was detected on May 19 and likely comes from a “poisoned” Visual Studio Code (VS Code) extension found by the… Read More "GitHub Confirms Breach of Internal Repositories"
Dialog, the invite-only group cofounded by Peter Thiel, notified members and past event participants last week that a database containing their personal information had been breached, supposedly by a criminal hacker. But a WIRED analysis found that the files were… Read More "Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed"
A vulnerability in the FFmpeg media processing framework allows attackers to crash applications and execute arbitrary code remotely, JFrog warns. FFmpeg is used in most media-processing applications across every platform, including desktop video players, Linux file managers, self-hosted media servers,… Read More "FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances"
A practical deception ROI formula is: Cyber Deception ROI = Value of Risk Reduction + Operational Savings – Deception Investment / Deception Investment Security teams can calculate value through analyst hours saved, faster response, lower false positive rates, reduced dwell… Read More "How to Measure ROI of Cyber Deception: Formula & Metrics"
Swati KhandelwalJun 23, 2026Cryptography / Quantum Computing President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures… Read More "Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration"
The administration argues that quantum technologies could eventually transform industries, including pharmaceuticals, manufacturing, logistics, energy, and defense, while providing strategic advantages in scientific research and national security. At the center of the initiative is a government-wide effort known as Quantum… Read More "Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative"
The China-aligned advanced persistent threat (APT) group Webworm has expanded its victim list beyond Asia, shifting focus to European governmental organizations as it evolves its tactics. Analysis of Webworm activity in 2025 by ESET researchers found it targeting government organizations… Read More "China-Linked Webworm APT Evolves Tactics, Expands to European Targets"
