Tag: dcsync

2 Attack Reports | 0 Vulnerabilities

Attack reports

AI-augmented threat actor accesses FortiGate devices at scale

A Russian-speaking financially motivated threat actor leveraged multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries between January and February 2026. The campaign exploited exposed management ports and weak credentials with single-facto…

credential abuse

active directory compromise

ai-augmented attacks

backup infrastructure targeting

russian-speaking actor

vpn exploitation

Published: April 21, 2026

Linked vulnerabilities : CVE-2024-40711 (CVSS 9.8), CVE-2023-27532, CVE-2019-7192

Downloadable IOCs: 2

China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy

Chinese threat actors continue to target U.S. organizations involved in policy issues. A recent intrusion into a non-profit organization active in influencing U.S. government policy on international matters occurred in April 2025. The attackers, likely Chinese-based, used various techniques to esta…

dll sideloading

policy influence

domain controllers

Published: November 7, 2025

Linked vulnerabilities : CVE-2021-44228, CVE-2022-26134, CVE-2017-9805, CVE-2017-17562

Downloadable IOCs: 7

Click here to see more Attack Reports