orca.securitywriteupOrca Security: FortiBleed
Orca Security writeup on "FortiBleed," a credential-theft vulnerability affecting Fortinet products, believed to relate to an authentication/memory-disclosure flaw allowing attackers to extract admin credentials. Page content was not available for verification, so specifics (exact CVE, affected versions, exploitation details) could not be confirmed from the fetched text.
TL;DR Orca Security's analysis of "FortiBleed," a Fortinet credential-theft vulnerability.
CVEs named here
- CVE-2026-35616
Technologies named here
Techniques named here
- Passive credential interception via diagnose sniffer packet
- Backdoor admin account creation
- Malware disguised as legitimate patch file
Threat actors named here
- FortiBleed
- FortigateSniffer
- EKZ Stealer
- INC Ransom
- LYNX
Related in Cloud & Infra
orca.securityarticleOrca Security: GenAI Risks in Cloud Environments
.png)
aikido.devwriteupGoogle API keys keep working after you delete them
attackthesoc.comarticle