FortiBleed harpoons 86,644 exposed FortiGate firewalls with no flaw to patch

On October 6, 2026, the FBI and Secret Service confirmed that the FortiBleed campaign has compromised more than 86,644 internet-facing Fortinet devices across 194 countries by reusing stolen credentials and cracking passwords on a GPU cluster. There is nothing to patch: the fix is MFA, PBKDF2 hashing and pulling firewall administration off the internet.