[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDG_3hM7DduScqdy1ZrUzDTsbiJu5NS1Tc24mdhGwE8Y":3},{"article":4,"iocs":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":27},"7307803d-e38a-4a48-9372-2f790a9e8317","FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs","fortibleed-actors-collaborating-with-inc-lynx-ransomware-gangs-25a0b7","After gaining a foothold in thousands of Fortinet firewalls, the attackers are starting to monetize that access, and are also piling on a Nextcloud zero-day bug.","Threat actors leveraging access gained through Fortinet firewall vulnerabilities, dubbed 'FortiBleed', are now collaborating with the Inc and Lynx ransomware gangs. These actors are monetizing their initial access and have also incorporated a zero-day vulnerability in Nextcloud into their operations, expanding their attack vectors and impact.","FortiBleed actors exploit Fortinet firewalls, partner with ransomware gangs, and use a Nextcloud zero-day.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fthreat-intelligence\u002Ffortibleed-actors-inc-lynx-ransomware-gangs","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt6c22b787d3880a22\u002F6a469e8782b5bc23f1d3a21e\u002Fransomware-Just_Super-Getty-1399980046.jpg?width=720&quality=80&disable=upscale","2026-07-02T19:11:33+00:00","2026-07-02T20:00:29.615778+00:00",8,[18,21],{"name":19,"type":20},"Fortinet firewall","product",{"name":22,"type":20},"Nextcloud","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":23,"icon":11,"name":25,"slug":26},"Threat Intelligence","threat-intelligence",[28,33,38,43],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"7d8b5ab8-ea0b-4ced-ae97-ec251b86993a","Ransomware","ransomware",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":44},{"id":45,"icon":11,"name":46,"slug":47},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[49,52,55],{"type":47,"value":50,"context":51},"FortiBleed","Vulnerability exploited by threat actors",{"type":47,"value":53,"context":54},"Inc ransomware","Ransomware gang collaborating with FortiBleed actors",{"type":47,"value":56,"context":54},"Lynx ransomware"]