Access-Broker

vulnerabilities 2026-10-26 High
k0t Campaign Exposes 70,000+ Credentials from FortiGate, FortiWeb and GlobalProtect Edge Devices
Group-IB and NyxLab detail a suspected access-broker campaign against Fortinet and Palo Alto edge devices that leaked 70,000+ credential records, with unconfirmed ties to ransomware crews.
network-appliance vpn credential-theft access-broker ransomware active-exploitation

k0t Campaign Exposes 70,000+ Credentials from FortiGate, FortiWeb and GlobalProtect Edge Devices