Exposed Firewalls and VPNs Put More Than 70,000 Credentials at Risk
A campaign attributed to k0t targeted internet-facing Fortinet and Palo Alto Networks appliances between February and June 2026, using known vulnerabilities and credential attacks to establish access, steal data, and maintain persistence.