On October 6, 2026, the FBI and Secret Service confirmed that the FortiBleed campaign has compromised more than 86,644 internet-facing Fortinet devices across 194 countries by reusing stolen credentials and cracking passwords on a GPU cluster. There is nothing to patch: the fix is MFA, PBKDF2 hashing and pulling firewall administration off the internet.

Microsoft shipped its largest-ever Patch Tuesday, 24 billion stolen credentials surfaced on an exposed Elasticsearch cluster, and ransomware gangs claimed 721 new victims. Three records, one month — and none of them are a coincidence.