Utopia Tech
▸ Engineering & Strategy Journal

Field notes from the edge.

What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.

All postsHealthcareEngineeringStrategySecurityIndustry
Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices
FeaturedAI
Security· 1 min read

Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices

A large-scale credential-harvesting campaign has compromised over 30,000 Fortinet devices globally, with attackers successfully compiling working credentials across multiple sectors in nearly 200 countries. The active threat represents a significant security risk for enterprise organizations relying on Fortinet infrastructure for network security.

UT
Utopia Tech·Jun 17, 2026
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekAI
Security

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Threat intelligence firm Defused Cyber reports active exploitation of three security vulnerabilities in Fortinet's FortiSandbox product, including CVE-2026-39813 (CVSS 9.1), a critical path traversal flaw in the JRPC API. The exploitation activity has been observed within the past 24 hours, with one vulnerability reportedly patched just last week, indicating attackers are moving quickly to exploit

UTUtopia Tech·1 min
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential StealerAI
Security

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are actively exploiting a critical, patched vulnerability in FortiClient Endpoint Management Server (EMS) to deploy credential-stealing malware across enterprise networks. The attackers leveraged trusted endpoint management infrastructure to distribute malicious payloads disguised as legitimate Fortinet endpoint components, allowing them to compromise managed endpoints at scale.

UTUtopia Tech·1 min
Skip to main content