192.0.2.41

CVE-2026-20881: Fortinet SSL VPN Session Validation Bypass

A session validation weakness in a mock Fortinet SSL VPN gateway can permit unauthorized access to management-adjacent functions when a device is exposed directly to the internet.

critical · Fortinet

VoidCrypt

VoidCrypt is the ransomware payload associated with the VoidLock Collective. It uses AES-256 encryption with RSA key wrapping and drops ransom notes in multiple formats. Defensive analysis only.

ransomware

Operation BlackHarvest

Double-extortion ransomware campaign targeting healthcare and manufacturing organizations through initial access broker partnerships. Uses phishing and VPN credential abuse for entry.

active

VoidLock

VoidLock is a mock double-extortion ransomware operation targeting mid-size healthcare and manufacturing organizations. Uses affiliate model and publishes redacted victim claims on a fictional leak site. All data is fictional and defensive.

active