Hackers hit Fortinet and Palo Alto devices, exposing over 70,000 credentials
Oct 23, 2026 · Summarized by Fundy Tech from 3 sources
Researchers say a global campaign targeted exposed Fortinet FortiGate and Palo Alto GlobalProtect devices. More than 70,000 exposed credentials were found, and the activity affected organizations worldwide.
Key points
- Group-IB and NyxLab linked the campaign to threat actor k0t.
- More than 70,000 exposed credentials were identified.
- Researchers say targets included Fortinet FortiGate and Palo Alto GlobalProtect devices.
Why it matters
Businesses with exposed firewalls or VPNs should check their edge devices now. The report says attackers used valid credentials and common admin tools to move deeper into networks. That raises the risk of data theft and persistent access.
Who’s affected: Organizations with exposed Fortinet or Palo Alto edge devices
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.