Reports
AI-generated structured vendor updates
Fortinet推出FortiGate 3500G/400G AI防火墙保护混合企业网络
...
英特尔与Fortinet共同开发SP6安全处理器，强化网络防火墙ASIC能力
...
Cisco Reveals 88.3% Multi-Turn Attack Success on AI Models, Acquires Astrix Security for $400M
At VB Transform 2026, Cisco revealed that 88.3% of 6,986 multi-turn attacks successfully compromised 15 flagship AI models. It also announced a $400M acquisition of Astrix Security to address the critical gap in AI agent identity and runtime isolation, joining the industry-wide consolidation wave with Palo Alto and CrowdStrike.
FortiBleed攻击全球暴露约75000台Fortinet防火墙设备
...
FortiBleed Credential Leak Exposes 75K FortiGate Firewalls, Management Plane Security Gaps
The FortiBleed campaign leaked configs from ~75,000 internet-facing FortiGate firewalls, with admin credentials hashed using weak SHA-256 (pre-PBKDF2) easily cracked offline. This highlights risks of exposed management interfaces and inadequate password policies.
Palo Alto Networks Launches AI Gateway as Centralized Control Plane for Enterprise AI
Palo Alto Networks announces general availability of AI Gateway, integrating Portkey technology, positioned as the enterprise AI control plane. It unifies LLM, MCP, and A2A gateway execution, processing over 68 trillion tokens with sub-millisecond latency and 99.999% availability.
Global FortiGate Compromise Exposes Critical Management Plane Vulnerabilities
Pakistan CERT warns of approximately 74,000 Fortinet FortiGate devices compromised across 194 countries. Attackers exploited exposed management interfaces and legacy credential storage. The incident underscores the critical need for securing network edge device management planes.
Cisco, G42, AMD Deploy 1GW AI Cluster in UAE, Pushing GPU Diversification and Full-Stack Integration
Cisco, G42, and AMD partner to deploy a large-scale AI cluster in the UAE based on AMD MI350X GPUs, integrating Cisco's full-stack secure AI infrastructure (UCS servers, Nexus 9K switches, Firepower firewalls). This marks Cisco's transformation into a full-stack AI infrastructure integrator and positions AMD as a second GPU supplier for US-allied nations, locking out Chinese vendors in the UAE market.
FortiBleed Exposes 70k+ Devices: Attack Surface Shifts from Zero-Day to Credential Hygiene
In July 2026, the FortiBleed credential theft campaign targeted 73,000+ Fortinet devices using a custom sniffer tool. Attackers exploited default/weak passwords, not zero-days, and are linked to INC and Lynx ransomware groups. Global banks, energy firms, and critical infrastructure operators are impacted, exposing a systemic failure in basic security hygiene.
FortiGate Firewalls Breached: 430K Devices Targeted with VPN Credential Sniffing
Attackers compromised approximately 430,000 FortiGate firewalls worldwide, deploying custom sniffers to intercept VPN credentials. The operation is linked to INC Ransom and Lynx ransomware groups, highlighting a new attack surface on edge devices that bypasses traditional EDR/SIEM.
Palo Alto Networks PAN-OS Vulnerabilities: Buffer Overflow and Active Exploitation
Palo Alto Networks disclosed 13 PAN-OS vulnerabilities, with the most critical being CVE-2026-0288 (CVSS 9.2), a buffer overflow in User-ID TSA allowing unauthenticated RCE. CVE-2026-0257, an authentication bypass in GlobalProtect, is actively exploited in the wild.
Cisco Locks AI Data Center Security Control Plane with Silicon One and Hypershield
Cisco launches next-gen security for AI data centers, deeply integrating Splunk SIEM with its Silicon One 51.2Tbps chip and Hypershield architecture to push security policies to the network edge. This move aims to shift the security control plane from standalone appliances to its proprietary ASIC and management platform, creating hardware lock-in.
Check Point launches AI orchestration platform, acquires Deepchecks to dominate security control plane
Check Point unveils Agentic Network Security Orchestration Platform, converting static firewall rules to intent-based policies via a proprietary network knowledge graph. Acquires Deepchecks' LLM team for continuous evaluation and monitoring. Four modules: Intent-to-Policy, Zero Trust tightening, Autonomous Troubleshooting, Continuous Compliance.
Check Point Bets on GPT-5.5 Privileged Access: Security Control Shifts from Firewalls to LLM APIs
Check Point joins OpenAI's Cybersecurity Trusted Access Program, gaining privileged access to GPT-5.5 for threat analysis and incident response. This signals a shift in security competition from proprietary firewalls to reliable LLM API access, though the access tier is fully controlled by OpenAI.
Cloudflare AI Gateway 2.0: Edge Control Plane Captures AI Inference Routing and Security
Cloudflare launches AI Gateway 2.0 with smart routing across 50+ model providers claiming 30% cost reduction, Workers AI edge inference (<10ms latency), NVIDIA GPU acceleration partnership, and expanded AI firewall. This shifts the AI traffic control plane from centralized clouds to the edge network.
Zscaler's ZAgent Framework and Zero Trust Browser: Control Shifts from Network to AI Orchestration
At Zenith Live 2026, Zscaler launched the ZAgent Framework for natural-language agent orchestration, a Zero Trust browser extension and enterprise browser to replace VDI/VPN, and expanded workload security to GCP. This shifts SASE control from network appliances to AI-managed endpoints and browser-based access.
PANW Acquires IBM QRadar SaaS: SIEM Ecosystem Consolidates, Cortex Platform Locks In Enterprises
Palo Alto Networks acquires IBM's QRadar SaaS security operations assets, aiming to migrate customers to Cortex XSIAM. IBM Consulting will assist deployments, and PANW becomes IBM's internal security standard. The SIEM market now sees Splunk under Cisco, QRadar under PANW, squeezing independent vendors.
Fortinet Hardens AI Security into ASIC with 3500G/400G, Shifting Control to Silicon
Fortinet expands FortiGate G-series with 3500G (400GbE datacenter) and 400G (enterprise edge), natively integrating shadow AI detection and MCP traffic inspection into NP7/SP5 ASICs, shifting AI security from software to silicon for zero-performance-loss security enforcement.
In-depth Analysis of CISA Agentic AI Security Guidelines
CISA released the world's first Agentic AI security deployment guidelines on May 1, 2026, marking a critical transition from theoretical discussions to mandatory compliance requirements.
Cisco Launches Firepower 6100 with Integrated Detection Engine to Combat Shadow Traffic
Cisco deployed its new Firepower 6100 firewall on the live MWC 2026 network, validating the Shadow Traffic detection feature in its 10.0 software release. This capability integrates Application ID, Encrypted Visibility Engine, and TLS/QUIC decryption to automatically identify and flag covert connections that bypass traditional security controls.