A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally.
The campaign, active since February 2026, involves collecting credential lists, searching for exposed services, brute-forcing accessible systems, and deploying bespoke
Google has resolved a critical vulnerability in Cloud Run that allowed unauthorized access to images via improper IAM configurations. This fix enhances security for users, ensuring tighter restrictions on image access and protecting sensitive data from potential misuse.
Over 1,000 WordPress sites have been compromised by malicious JavaScript backdoors, allowing persistent access for attackers. Site owners are urged to secure their platforms immediately, as these vulnerabilities can lead to data theft and further exploitation.
![Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails](https://thebitcoinstreetjournal.com/storage/2025/03/2608480-microsoft-warns-of-clickfix-phishing-campaign-targeting-hospitality-sector-via-fake-booking-com-emails-670x427.jpg "Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails")
Microsoft has raised alarms over a phishing campaign targeting the hospitality sector, linked to deceptive emails from Fake Booking.com. This scheme aims to exploit vulnerabilities in hotel booking systems, posing serious risks to sensitive customer data.