Security Signal Weekly: June 13-19, 2026

OverviewThis week had a very practical theme: attackers are still winning through trusted access paths. Firewalls with reused credentials, enterprise logging tools, SD-WAN managers, hosting plugins, CMS editors, AI search, and paid WordPress updates all show the same pattern. The systems people trust to manage access, publish content, or speed up work are also the systems that need the clearest ownership and fastest verification.Reality check: Do not stop at patch available, takedown complete, or vendor says fixed. The useful question is whether your instance, tenant, site, or credential set is actually clean now.Top 10 Security Signals1. FortiBleed turns stale Fortinet credentials into a perimeter emergencyWhat happened: SOCRadar reported an active FortiBleed credential compromise campaign involving 86,644 confirmed working Fortinet FortiGate firewall and SSL VPN credentials across 194 countries. The researchers say the exposed data appears tied to credential-based attacks, brute…