# FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices - BTS #77

Page: https://stenobird.com/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77
Text version: https://stenobird.com/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77.md
Podcast: [Below the Surface (Audio) - The Supply Chain Security Podcast](https://stenobird.com/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778)
Published: 2026-06-30T16:36:00+00:00
Episode link: https://belowthesurfacesw.libsyn.com/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77
Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/belowthesurfacesw/77.mp3?dest-id=3822522
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/below-the-surface-audio-the-supply-chain-security-podcast-5987778/episodes/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77
Duration seconds: 3289

## Resource

In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and best practices for defenders to mitigate such threats. Key topics FortiBleed campaign details and impact Password hash vulnerabilities in FortiOS AI's role in analyzing large security breaches Credential harvesting techniques and defenses Importance of layered security and best practices Chapters 00:00 Introduction and Initial Thoughts on AI Models 10:04 Credential Harvesting and Security Weaknesses 19:58 Hash Management and Security Appliances 30:15 Incident Response and Vulnerability Management 39:46 The Future of Security in the Age of AI

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/below-the-surface-audio-the-supply-chain-security-podcast-5987778/episodes/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778/fortibleed-uncovered-how-attackers-harvest-credentials-from-fortinet-devices-bts-77.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.