NetExec

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 22, 2026
Last mentioned3d ago

Timeline

1 articles · newest first

Operators hit FortiGate, FortiWeb and GlobalProtect to steal stored passwords

Group-IB and NyxLab tie the edge-device campaign to k0t and report more than 70,000 exposed credentials.

Cyber Security Newsupdated 17:19 UTC · 3h agofirst Oct 22, 06:30 UTC · 3d agoExploit / PoCExploited19 sourcesCVE-2025-64446 CVE-2026-02574 · 3 reads

Related CVEs

by mentions

CVE-2025-6444692%9.8
Unauthenticated Path Traversal in Fortinet FortiWeb Enables Admin Command Execution
published Nov 14, 2025Fortinet FortiWebKEVPoC
CVE-2026-025797%7.8
Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
published May 13, 2026Palo Alto Networks PAN-OS (GlobalProtect portal and gateway)KEVRansomware

Appears with

FortiGateproduct · 1
GlobalProtectproduct · 1
k0tthreat actor · 1
Palo Alto Networksvendor · 1
Group-IBorganization · 1
Ateramalware · 1
FortiWebproduct · 1
Mimikatzmalware · 1
NyxLaborganization · 1
Impacketmalware · 1
PAN-OSproduct · 1
Rclonemalware · 1
Fortinetvendor · 1
MeshCentralmalware · 1

Entities are extracted by the model from each article. First seen Oct 22, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.