70,000 credentials off exposed firewalls, and the researchers say the device mattered more than the industry
2026-10-26Security
Group-IB and NyxLab tracked an actor exploiting FortiWeb and PAN-OS flaws, moving with legitimate remote access tools and exfiltrating with Rclone. The victim list tracks exposure rather than sector.