A newly discovered data leak dubbed “FortiBleed” has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide.

The exposed data was first discovered by security researcher Bob Diachenko, who says he found a server containing what appeared to be valid Fortinet VPN credentials, including usernames, email addresses, and plaintext passwords.

According to screenshots and information shared by Diachenko, the database contains entries for Chevron, Samsung, Foxconn, Comcast, AT&T, Mercedes-Benz, Toyota, Sinopec, State Grid, and many others. 

“Massive Fortinet/FortiGate bruteforce/active exploitation campaign uncovered in action,” Diachenko posted on LinkedIn.

“Thousands of top vendors instances are listed in the files like this (see screenshot). This one alone has 21,634 domain names – from Chevron to Fortinet itself. All – with potentially working passwords to the FortiGate appliances obtained through various menas.”

The exposed data also included comments listing each organization’s industry, revenue, and number of employees, likely for planning attacks.

Diachenko later shared additional information that claimed the operation was conducted by a Russian-speaking multi-operator threat group that harvested credentials for FortiGate SSL VPN devices.

According to Diachenko’s investigation, the attackers allegedly conducted approximately 1.16 billion credential attempts against 320,777 FortiGate targets and an additional 2.1 billion attempts against 163,650 Microsoft SQL Server systems.

He further claimed the threat actors intercepted SSL VPN authentication hashes, cracked them using a 45-GPU cluster managed through Hashtopolis, and used the recovered credentials to move laterally into internal Active Directory environments.

Diachenko told BleepingComputer he obtained these details after analyzing additional files inadvertently exposed on the same server.

“They accidentally left an open directory with artefacts, connection strings, tooling, scripts and data online. Analytics obtained via their cron jobs, bash histories, logs etc,” Diachenko explained.

The researcher also stated that multiple organizations across Japan, Taiwan, Vietnam, Iraq, and Turkey were fully compromised, including a Turkish NATO defense contractor from which classified documents were allegedly stolen. 

Threat intelligence company Hudson Rock has since published its own analysis of the exposed data after receiving the dataset from Diachenko. The company described the collection as one of the largest known troves of compromised Fortinet-related credentials.

According to Hudson Rock, the dataset contains 73,932 unique firewall URLs across 194 countries and impacts 21,632 unique domains. 

The company says the attackers maintained detailed logs of successful compromises and assembled a database containing verified credentials for organizations across nearly every major industry sector. 

Among the organizations Hudson Rock says appear in the dataset are Foxconn, Samsung, Comcast, Siemens, Lenovo, PwC, Accenture, Oracle, and numerous government agencies and critical infrastructure operators. 

The company also released statistics showing that the highest number of affected devices was in India, the United States, Taiwan, Mexico, Turkey, Thailand, Colombia, Malaysia, Chile, and the United Arab Emirates.

The most common sectors for the listed companies are telecommunications, IT services, financial services, government organizations, healthcare providers, educational institutions, and manufacturing.

One strange aspect of the leak is that many of the exposed credentials were long, complex passwords that would ordinarily be considered difficult to crack.

Believed to be extracted from Fortinet configs

Cybersecurity researcher Kevin Beaumont independently reviewed portions of the exposed data and told BleepingComputer that some of the credentials are authentic.

“I have been able to confirm the authenticity of some of the admin logins and passwords – this looks like a real dump,” Beaumont said.

After further review of the data shared by Hudson Rock, Beaumont published additional findings indicating that the dataset contains credentials for roughly 75,000 Fortinet devices, most of which remain online.

According to Beaumont, the data appears to have originated from exported Fortinet configurations because it contains information, including email addresses, that is typically only accessible through configs.

He also said the affected IP addresses are different from those in the 2025 Belsen Group Fortinet leak, further indicating that this is a more recent and larger collection of compromised devices.

Beaumont said he verified that multiple organizations listed in the dataset were using valid credentials and observed that many affected devices were running relatively recent FortiOS versions.

“The data is legit. It is around 75k devices. Almost all are still online, and Fortinet devices. It appears to be recent data,” Beaumont wrote.

Based on network data from Shodan, Beaumont says the leak contains approximately half of all internet-accessible Fortinet firewalls and said that a majority of the affected devices expose their FortiGate management interfaces directly to the internet.

The source of the configuration data remains unknown, with it unclear whether it was stolen through previously disclosed Fortinet vulnerabilities, a newly discovered flaw, or another method. Neither Diachenko, Hudson Rock, nor Beaumont have identified how the configuration data was originally obtained.

Hudson Rock has created a free FortiBleed lookup tool to check if your organization is impacted.

Organizations in the dataset should immediately rotate passwords associated with Fortinet VPN and administrative interfaces, enforce MFA, examine gateway logs for suspicious activity, and monitor for exposed employee credentials.

BleepingComputer contacted Fortinet regarding the exposed dataset and will update this article if we receive a response.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

During The State of Unreal keynote at Unreal Fest on Wednesday, Epic Games revealed just how it’s embracing generative AI in Unreal Engine (UE). Along with offering the first details on Unreal Engine 6 (UE6), the company discussed new features for Unreal Engine 5.8, which it also released on Wednesday. As part of the latest update, Epic is offering an experimental Model Context Protocol (MCP) plugin that will allow developers to hook gen AI models such as Claude and Gemini into Unreal Engine. It’s looking to make the MCP an integral part of UE6.

Marcus Wassmer, the head of Epic’s development team, wrote in a blog post that the gen AI models can act as “creativity and productivity multipliers so that teams can focus their efforts on the essential creative and technical tasks of development rather than time on time-consuming manual tasks.” 

The blog post went on to state that, “our goal for UE6 is to greatly reduce the tedious work in authoring content to leave more time for creative exploration, and increase the amount of iterations a team can make to polish their content. UE6 will ship with tools and workflows where you can choose to bring your own favorite models, battletested against internal development and in UEFN [Unreal Engine for Fortnite].”

Unreal Engine 5.8 ships today with experimental MCP server support:

Your sources, your pipeline and your workflow—simply configure the MCP plugin and connect to any agent. Get familiar with the MCP server and the PCG Primitive Plugin today and see what teams can build together:… pic.twitter.com/Ca5yZIH443

Advertisement

— Unreal Engine (@UnrealEngine) June 17, 2026

Epic gave a demonstration of Claude Code connecting to UE, then pulling objects from an asset library and placing them in a virtual living room. Developers can still move the objects around manually in the UE editor. 

The company also showed how a developer might use Claude Code in UE to build a city that can be automatically adjusted as assets like parks are added. Along with modifying assets, gen AI models can adjust factors like lighting and match atmospheric conditions to real-world examples.

In a video showing off Unreal Engine 5.8, Epic suggested that developers could use the likes of Claude to “automate asset creation, testing and optimization. The plugin can access core UE systems such as blueprints, assets, levels, materials, meshes and many more.”

It shouldn’t be too much of a surprise that Epic is going all in on gen AI in UE6. Back in November, CEO Tim Sweeney suggested that a “made with AI” tag may be “relevant to art exhibits for authorship disclosure, and to digital content licensing marketplaces where buyers need to understand the rights situation. It makes no sense for game stores, where AI will be involved in nearly all future production.”

In January, the Game Developers Conference published its 2026 State of the Game Industry report, which was based on a survey of more than 2,300 game industry workers. Of those, 36 percent said they were using gen AI tools as part of their job. Most of those using such tools were doing so for research and brainstorming (81 percent) but also for tasks like prototyping (35 percent). However, 52 percent of respondents said they thought gen AI was bad for the industry. That figure was up from 30 percent in the 2025 edition of the survey and 18 percent in 2024. Only seven percent said it was having a positive impact.

Elsewhere at Unreal Fest, it emerged that Epic is merging Unreal Engine 5 and UEFN into a single platform in UE6. One other thing that the company is testing is the ability to pull Fortnite skins into other UE6 games, and to let developers move their skins in the other direction. The company aims to release UE6 in early access in late 2027, with a full release lined up for around 12-18 months later.

Epic had some news to share about collaborations as well. Those creating Fortnite experiences using UEFN will soon be able to make games based on The Simpsons, just as they can currently do with Star Wars IP. The company also revealed that more than 30 gaming collaborations are lined up for Fortnite this year, including Sonic Racing: CrossWorlds, Vampire Survivors, Control Resonant and Phantom Blade Zero.

However, Vampire Survivors developer Poncle appears to have concerns about Epic’s embrace of gen AI. “Following today’s news about gen AI usage by Epic to create all sort [sic] of game assets, including Fortnite characters, we’re currently ‘reviewing’ our collaboration with Fortnite,” Poncle stated on Reddit. “We’ll let you know if anything moves forward.”

Ghana will take on Panama in a must-win contest for both teams as they begin their respective FIFA World Cup 2026 Group L campaigns in Toronto. A defeat would leave either side facing a daunting path, with upcoming matches against European heavyweights England and Croatia.

Quarter-finalists in 2010, the Black Stars enter the match as favorites, particularly with Panama’s star midfielder Adalberto Carrasquilla reportedly nursing an injury and unlikely to be risked. Yet Ghana have had a difficult spell recently, highlighted by their failure to qualify for the most recent 24-team Africa Cup of Nations, for the first time in two decades.

The streaming industry has gotten a lot of flak over the past few years, but there is one thing that Hollywood studios are undeniably good at: recycling the same idea, over and over and over again until the world ends (or until everyone finally decides they’re sick of Harry Potter, whichever comes first).

This tried-and-true formula is now playing out in real time with Prime Video’s Off Campus and Netflix’s upcoming series Icebreaker, shows that, like Heated Rivalry, are hockey-themed romances about polar opposites who just can’t seem to keep their hands off each other.

But there’s one key difference: Icebreaker and Off Campus are about heterosexual romances, while Heated Rivalry is about a secret gay relationship. And considering how much queerness played a role in Heated Rivalry’s explosive popularity, it seems like the clamor for straight horny hockey content is another example of Hollywood just not getting the message.

Off Campus, which debuted last month, is about Hannah Wells, a reserved musician who agrees to enter a fake relationship (?) with college hockey captain Garrett Graham in exchange for philosophy class (??) tutoring. The forthcoming Icebreaker, which Netflix announced this week, is about a figure skater who falls in love with a hockey player after they’re forced to practice on the same rink.

Hockey aside, Icebreaker and Off Campus have a lot in common with Heated Rivalry. They’re all adaptations of popular novels: Off Campus is based on a series of steamy books by Canadian author Elle Kennedy, while Icebreaker is inspired by a YA novel by British author Hannah Grace. They’re also all variations on the “enemies to lovers” trope, popularized by fanfic sites like Wattpad and ao3.

When it debuted on Crave and HBO Max last winter, Heated Rivalry primarily received attention for its steamy sex scenes, as well as the chemistry between its two leads, Connor Storrie (who plays the mercurial Ilya Rozanov) and Hudson Williams (the straight-laced Shane Hollander). But as the show gained traction, it also was acclaimed for its depiction of the surprisingly tender relationship between the two, as well as its portrayal of LGBTQ-specific spaces and themes. It also gained a huge following among straight women, drawing attention to the Japanese fandom fujoshi, which centers around heterosexual women consuming gay male stories.

It’s hard to overemphasize just how much of Heated Rivalry’s success is owed to its queerness—not just because it was hot, but because there is genuine audience demand for it. According to UCLA’s 2024 “Hollywood Diversity Report,” shows featuring “underrepresented stories,” including LGBTQ-themed narratives, have higher median ratings and more social media discourse than shows that don’t. “The evidence is clear that audiences today are hungry for both diverse stories and diverse storytellers,” the report’s coauthors Ana-Christina Ramón and Michael Tran tell WIRED via email.

There is certainly evidence to suggest that general interest in hockey has increased as a result of Heated Rivalry’s popularity, with NHL ticket sales reportedly surging in the weeks after the show’s launch. But it’s hard to understand how studio executives can look at the success of that show and attribute it to a sudden, newfound interest in a sport that, historically, has been less popular in the United States than baseball, basketball, or football.

The actual explanation for Heated Rivalry’s popularity appears fairly obvious: the girls, gays, and theys like watching hot guys make out in hotel rooms and exchange yearning looks over a dance floor. The taboo nature of Shane and Ilya’s relationship in a traditionally hetero-masculine space also likely played a huge role, says Matt Puretz, senior researcher for UCLA’s Center for Storytellers and Scholars.

If a blackout has ever cost you a fridge full of groceries, Jackery has a fix for that now. The company is introducing FridgeGuard alongside three new HomePower Series batteries, giving you power backup options for different appliances.

FridgeGuard brings a sleek new look to fridge backup power

Jackery says FridgeGuard is the world’s slimmest refrigerator backup battery. It measures just 2.6 inches thick and weighs 23 pounds, allowing it to sit beside a refrigerator, lie flat, or be mounted on a wall. Inside, a 1024Wh battery delivers up to 15 hours of runtime, stretching to 30 hours with an optional expansion battery.

With a 10ms switchover, your fridge barely notices when the power actually cuts out. Jackery also built in a 1600W peak output to handle compressor startups, along with surge protection and a bypass mode that preserves battery health once it is fully charged. FridgeGuard can also support home offices, aquariums, and CPAP devices. It launches as a Costco exclusive at $559.99 for members.

Jackery HomePower Series brings home backup power in three sizes

For broader backup needs, Jackery is introducing three HomePower models:

• HomePower 3600 Pro Max ($2,999) leads the lineup with 3584Wh of base capacity, scalable up to 43kWh, and can pair with a Manual Transfer Switch to back up your entire home automatically.
• HomePower 2000 Plus v2 ($1,799) focuses on flexible scaling and solar charging. It offers 2048Wh that expands up to 12kWh through simple battery stacking.
• HomePower 1000 v2 ($849) targets home offices with 1024Wh and built-in surge protection for sensitive electronics.

All three rely on LiFePO4 batteries rated for 6000 cycles, translating to roughly 16 years of use. The HomePower Series launches June 23 through Jackery’s website and Amazon.

Jackery is entering a growing category of home backup batteries designed specifically for refrigerators. Earlier this month, Anker introduced the Solix S2000, a compact power station that claims up to 35 hours of fridge runtime during a blackout.

“It’s myopic in the extreme to think that no other competitors to Anthropic will develop similar capabilities to Mythos or even that they have not already done so,” says Tarah Wheeler, chief security officer of the specialized cybersecurity consulting firm TPO Group. “There are other companies hot on Anthropic’s heels who probably have the capabilities, too, and are holding them in reserve as they see how Anthropic is being treated in the current regulatory environment.”

Anthropic itself has emphasized this point since the launch of Mythos Preview. “The real message is that this is not about the model or Anthropic,” Logan Graham, the company’s frontier red team lead, told WIRED when Mythos Preview launched in April. “We need to prepare now for a world where these capabilities are broadly available in 6, 12, 24 months.”

OpenAI, for example, also did a private release of a cybersecurity-focused model in mid-April and announced an expanded cybersecurity strategy.

Researchers note that even before this next generation of models, existing AI offerings could be used for advanced vulnerability-hunting and exploit development with a refined harness. A large group of cybersecurity leaders emphasized this to the administration in an open letter on Sunday, arguing that the White House’s export-control directive was misguided.

“It’s not one model; it’s the general trend of technology,” says Bruce Schneier, a researcher at Harvard University and the University of Toronto who has been analyzing the situation. “Smaller, cheaper, open-source models, sometimes by themselves and sometimes in concert with each other, can match Mythos/Fable’s performance with more sophisticated prompting. And we should expect other models to match Mythos/Fable’s creativity and tenaciousness within months—slightly longer for open-source models.”

What the White House and governments around the world need to focus on, experts say, is democratically developing much broader and more transparent plans for how they will contend with advances in AI capabilities on cybersecurity and in other sensitive areas as they inevitably occur.

“The policy question is not whether a technology has risk,” says Chris Wysopal, cofounder of the cloud security firm Veracode. “The question is whether a specific restriction meaningfully reduces that risk or whether it mainly slows down the people trying to make systems safer.”

This story originally appeared at wired.com.

Half of American adults now use AI chatbots, but a plurality believe the technology will ultimately damage society, and overwhelming majorities have lost confidence that either the government or the companies building it will manage it responsibly. A new Pew Research Center report released Wednesday, based on a survey of 5,119 US adults conducted in February, found that 49% of respondents use AI chatbots, up from roughly a third in 2024. At the same time, 40% said AI will be worse for society, roughly two-thirds said it is advancing too quickly, and 71% agreed the technology will make their personal data less secure.

ChatGPT remains the dominant chatbot among US adults, with 44% of respondents reporting they have used the OpenAI application. Google’s Gemini ranked second at 24%, followed by Microsoft Copilot at 17%, MetaAI at 14%, Grok at 8%, Claude at 6%, and Character.ai at 3%. The most common use case was information searching, cited by 42% of chatbot users, followed by entertainment at 25%, creating or editing images and videos at 24%, and medical advice at 20%.

The trust deficit is the report’s most striking finding. Two-thirds of Americans, 67%, said they have little or no confidence that the US government could effectively regulate AI. A separate 59% said they have little or no confidence that US companies could develop the technology responsibly.

The federal government’s failure to produce a coherent AI regulatory framework, despite months of internal deliberation and a scrapped executive order, appears to have registered with the public. The partisan divide on regulation is notable, with a separate Pew survey from March 2025 finding that 54% of Republicans had at least some trust in the US to regulate AI, compared with only 36% of Democrats.

“AI is no longer the future; for many, it’s here and now,” Pew Research Center associate director of research Jeffrey Gottfried said in a statement accompanying the report. “Americans are increasingly using chatbots and bringing AI into their homes, but they have a complex relationship with AI. They may use it, but they’re still highly skeptical of it and how it will impact our society.”

The skepticism extends across demographics. In an earlier Pew survey from 2024, only 17% of the general public said AI would have a positive impact on the United States over the next 20 years, compared with 56% of AI experts who thought the same. Americans were more optimistic about AI in medical care, where 44% expected positive effects, but far less so about education, where only 24% were positive, and jobs, where the figure dropped to 23%.

The jobs concern is not abstract. Meta and Microsoft eliminated a combined 23,000 positions in a single day in April, with both companies explicitly citing AI investment as the reason. The tech sector has recorded more than 96,000 job cuts in 2026 so far, and companies making the cuts are among the most profitable on earth.

Pew found that 21% of US workers now use AI in their jobs, up from 16% in 2024, but far more workers report being worried than hopeful about where the trend leads. Only 23% of the general public said AI would have a positive impact on how people do their jobs over the next 20 years, compared with 73% of AI experts.

The report also captured the scale of non-adoption. Of the 51% of US adults who do not use AI chatbots, 60% attributed it to disinterest rather than lack of access or technical ability. Many respondents also acknowledged using products with AI features without identifying them as AI tools, including smartwatches at 37% and smart speakers such as Amazon Echo or Apple HomePod at 35%.

Fewer Americans use chatbots for the kinds of high-stakes applications that have attracted the most regulatory scrutiny. Only 13% reported using chatbots for news, 10% for emotional support, and 4% for companionship. The data privacy concern was more pervasive, with 71% of respondents agreeing that AI will make personal data less secure.

The new Pew data draws from multiple surveys conducted at different points between 2024 and February 2026. The chatbot usage figures reflect the February 2026 survey, while some attitudinal measures draw from earlier polling periods. The methodology uses Pew’s American Trends Panel, a nationally representative sample recruited through random sampling of residential addresses, with interviews conducted online or by phone.

What the data describes is a country that is adopting AI tools faster than it is developing confidence in the institutions meant to govern them. The gap between usage and trust is widening, not closing, and neither regulators nor the industry has offered a credible plan to address it.

At IO-AI Tech, a startup about 45 minutes north of downtown Shenzhen, China, I glimpsed a wacky new frontier of blue-collar work. Workers wearing the company’s VR headsets, handheld controllers, and motion-tracking gear remotely control humanoid robots for workplaces like factory floors and convenience stores. The company wants the robots to do useful work, like stocking shelves and picking items out of bins, but it also wants to gather training data that could one day let the bots operate autonomously.

To show off the tech, the company invited me to its offices, where I was allowed to control 10 humanoid robotic hands, each from a different company, using a custom motion-tracking glove. The device instantly transferred my finger movements to all 50 robotic digits.

I’m a little embarrassed to say that the first thing I tried with this futuristic gear was getting all 10 hands to flip the bird. After getting this out of my system, I was impressed by how quickly my movements transferred to the robot hands, and how easily the tech went both ways—I was able to feel a ball placed in one of the electronic hands.

The company also let me try a system that’s being tested by a Chinese convenience store chain. Using a VR headset and a pair of grippers, I tried picking up boxes of medication from a shelf. It was disorienting at first: I had to adjust to a slight difference between my movements and those of the robot I could see through the headset. After a little practice, however, I was stacking shelves like a robot-boss.

Elsewhere, I watched people wearing virtual reality headsets and body-tracking sensors reminiscent of Ready Player One. In one large room, I saw workers using a range of different systems to control diminutive Unitree humanoids. One person marched around with a Unitree robot next to them, and the machine mirrored their movements within a mocked-up apartment. The human operator, wearing a headset and viewing the scene through the robot’s eye-level cameras, went through the motions needed to remove a shirt from a hanger and fold it.

IO-AI develops technology that transfers a person’s movements to different robot forms—a useful offering because there are dozens of different humanoids and robot hands on the market in China today. The startup’s algorithms also need to combine human control with some level of autonomy because a person and a robot aren’t always going to be the same shape, size, and weight. Without some ability to move independently, the robot may lose its balance.