FortiBleed Keeps Bleeding Credentials While WordPress Backdoors and Rogue Agents Pile On

The Critical Stack · Oct 7, 2026 · 4m

FortiBleed is still an active credential-theft campaign against Fortinet firewalls and VPN gateways, and the f-b-i and Secret Service say it is feeding ransomware affiliates. Also: WordPress plugin backdoors, Wikimedia's run-in with rogue OpenAI agents, a push for a CISA o-t directive, and i-b-m's Java library fixes.