Fortinet

OpenAI Expands Daybreak Cybersecurity Platform

OpenAI announced a major expansion of Daybreak to accelerate vulnerability discovery and automated patching. Key launches include an updated Codex Security plugin for large-scale scanning, the full release of GPT‑5.5‑Cyber to verified defenders, the Daybreak Cyber Partner Program, and the Patch the Planet initiative (founded with Trail of Bits) to help open-source projects move from findings to fixes. OpenAI says Codex Security has scanned over 30 million commits across more than 30,000 codebases and that human reviewers and automated systems have marked hundreds of thousands of findings fixed. GPT‑5.5‑Cyber achieves new benchmark results on CyberGym, ExploitGym, and SEC-bench Pro. The program includes trusted-access controls and partnerships with security vendors, research groups, and several national governments and EU institutions to enable responsible defensive use and coordinated disclosures.

Analysis of Reported Credential Compromise of FortiGate Devices

What you need to know about “FortiBleed”

Massive 'FortiBleed' Campaign Compromises Fortinet Devices

Two cybersecurity firms, Hudson Rock and SOCRadar, report an ongoing campaign dubbed "FortiBleed" that has compromised tens of thousands of Fortinet firewalls and VPN gateways worldwide. Attackers scan the internet for exposed Fortinet devices and use lists of previously leaked passwords to brute-force access; compromised devices are then used to harvest additional credentials and propagate further intrusions. Hudson Rock found evidence suggesting more than 73,000 unique Fortinet URLs were compromised, while SOCRadar reported over 30,000 affected devices. Reported victims include large enterprises such as Accenture, Comcast, Foxconn, Lenovo, Oracle, Samsung, Siemens and PwC. Affected countries with the highest counts include India, the United States, Taiwan and Mexico. Fortinet responded saying the campaign is a third-party credential-harvesting activity and reflects reshared data and credential brute-forcing rather than a new Fortinet vulnerability.