Utopia Tech
▸ Engineering & Strategy Journal

Field notes from the edge.

What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.

All postsHealthcareEngineeringStrategySecurityIndustry
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
FeaturedAI
Security· 1 min read

Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

The Gunra ransomware gang is successfully targeting critical infrastructure by exploiting known vulnerabilities in Fortinet firewalls and VPN appliances while bypassing multi-factor authentication. The group operates as a ransomware-as-a-service (RaaS) model and leverages leaked Conti ransomware code to execute their attacks. This highlights the ongoing risk posed by unpatched legacy vulnerabiliti

UT
Utopia Tech·Aug 11, 2026
Sweeping Credential-Harvesting Heist Compromises +30K Fortinet DevicesAI
Security

Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices

A large-scale credential-harvesting campaign has compromised over 30,000 Fortinet devices globally, with attackers successfully compiling working credentials across multiple sectors in nearly 200 countries. The active threat represents a significant security risk for enterprise organizations relying on Fortinet infrastructure for network security.

UTUtopia Tech·1 min
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekAI
Security

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Threat intelligence firm Defused Cyber reports active exploitation of three security vulnerabilities in Fortinet's FortiSandbox product, including CVE-2026-39813 (CVSS 9.1), a critical path traversal flaw in the JRPC API. The exploitation activity has been observed within the past 24 hours, with one vulnerability reportedly patched just last week, indicating attackers are moving quickly to exploit

UTUtopia Tech·1 min
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential StealerAI
Security

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are actively exploiting a critical, patched vulnerability in FortiClient Endpoint Management Server (EMS) to deploy credential-stealing malware across enterprise networks. The attackers leveraged trusted endpoint management infrastructure to distribute malicious payloads disguised as legitimate Fortinet endpoint components, allowing them to compromise managed endpoints at scale.

UTUtopia Tech·1 min
Skip to main content