QUANTUM THREAT INTELLIGENCE

k0t Campaign Breached Fortinet and Palo Alto Edge Devices at Scale, Over 70,000 Credentials Exposed: Group-IB

A Group-IB and NyxLab investigation published October 23, 2026 attributes a campaign against internet exposed Fortinet FortiGate and FortiWeb and Palo Alto GlobalProtect, PAN-OS and Prisma Access appliances to an actor called k0t, linked to the Qilin and The Gentlemen ransomware groups. Access came through CVE-2025-64446 and CVE-2026-0257 or plain brute forcing of common passwords, persistence through legitimate remote access tools, and more than 70,000 credentials tied to network devices and directory dumps were exposed. The actor scanned for appliances rather than choosing targets, so any Canadian operator with an exposed firewall or VPN gateway on an old firmware or a weak admin password was a candidate.

SOURCE

The Hacker News, citing Group-IB and NyxLab

DATE

October 23, 2026

Why this matters for your infrastructure

Every advance in quantum computing shortens the window for migrating long lived infrastructure off quantum-vulnerable encryption, and data captured today can be decrypted later. Fabric Networks helps energy, government, telecom and community networks move to quantum-safe encryption on their own timeline, not an adversary's.