Hudson Rock says it found 40,573 exposed secrets in FortiBleed 2.0
Hudson Rock says newly obtained FortiGate files contain local-user and directory-binding records, adding older material to its credential-exposure investigation.
Loading… Բեռնվում է…
Hudson Rock says newly obtained FortiGate files contain local-user and directory-binding records, adding older material to its credential-exposure investigation.
Hudson Rock says its FortiBleed 2.0 investigation identified 40,573 exposed secrets in 1,703 newly obtained FortiGate configuration files, as detailed by The Hacker News. The findings count exposed records, not confirmed account misuse or newly compromised people.
The follow-up examines older material than the first investigation. Hudson Rock said the newly obtained configurations date to around February 2026, while the first investigation examined material likely dating to May/June. Those are dates for the configuration material, not established dates of account compromise.
The files concern FortiGate, Fortinet’s firewall product. Hudson Rock’s figures measure different parts of the dataset: files, host identifiers, domains and exposed secrets.
| Measure | Count |
|---|---|
| Exposed secrets | 40,573 |
| Local-user records included among the secrets | 37,076 |
| Active Directory LDAP bind records included among the secrets | 1,576 |
| Newly identified domains | 975 |
Reddit plans to test the change outside the US this quarter. Proposed exceptions would keep the homepage and content reached through search engines or shared links open without login.
2 min
| Newly obtained configuration files | 1,703 |
| Host identifiers associated with the files | 1,689 |
The newly identified domains are domain names, not a count of distinct newly breached organisations.
The exposed secrets include 37,076 local-user records and 1,576 Active Directory LDAP bind records. Active Directory is Microsoft’s directory service; its Domain Services component checks credentials and defines access rights for network users and devices. LDAP stands for Lightweight Directory Access Protocol, one of the protocols Active Directory uses. The LDAP bind records concern credentials used to connect to that directory.
The Gemini for Home changes also target mistaken timer requests and controls for devices in other rooms. Rollout began on 29 October 2026 and may take time to reach everyone.
2 min
Meta’s standalone app is available on iOS and Android in Indonesia, Singapore and Thailand. Its descriptions promise outfit ideas and virtual try-ons using users’ existing wardrobes.
2 min