DefendEdge Cyber Security Blog
FortiBleed: From Credential Exposure to a Secure FortiGate State
FortiGate firewalls provide crucial security at the edge of an organization’s network. These firewalls protect internet-facing services, terminate VPN connections, enforce security policies, and provide the path into the internal network in many environments. When you are warned about potentially compromised FortiGate credentials across over 80,000+ verified devices across almost 200 countries, you should heed…
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data…
Vishing and MFA Phishing Attacks
1. Executive Summary Threat actors are targeting banking clients through coordinated social engineering campaigns that leverage sophisticated voice phishing (vishing), bank impersonation, caller ID spoofing, credential-harvesting websites, and MFA social engineering. These attacks are conducted in real time, allowing threat actors to capture victims’ banking credentials and authentication codes and immediately use them to access…
Healthcare Under Attack: 83 Incidents in One Week and the Senate’s Answer
Hospitals and clinics absorbed 83 attacks in one week, tied with government as the most-targeted sector. Here is what the data says, and how to respond.
Vulnerability Summary for the Week of September 21, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 101gen–Automation Web Platform Notifications and OTP for WooCommerce, Advanced Country Code The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to…
Ransomware Is Running Hot: What 457 Attacks in One Week Reveal
Ransomware drove 457 of 1,068 tracked attacks this week — 43% of all incident volume. Who’s being hit, which crews are surging, and how to prepare.
Vulnerability Summary for the Week of September 14, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 03-lovepreetSingh–MCP A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might…
The Developer Is the Perimeter: Inside This Week’s Supply Chain Espionage Campaigns
1,090 attacks tracked this week — but the sharpest threat wasn’t ransomware. It was fake job tests and poisoned supply chains aimed at developers.
Vulnerability Summary for the Week of September 7, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 100plugins–Open User Map Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions. 2026-09-08 7.1 CVE-2026-84818 92181–markdown A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation…
Faking Authority: What the Revolut Breach Reveals About Financial Sector Cyber Threats
Revolut’s breach via fake government requests exposes authority impersonation hitting finance — 70 attacks this week. Six steps to defend your firm.