# Fortibleed: The bleeding edge of AI cybercrime

Page: https://stenobird.com/podcast/risky-business-features-7716365/fortibleed-the-bleeding-edge-of-ai-cybercrime
Text version: https://stenobird.com/podcast/risky-business-features-7716365/fortibleed-the-bleeding-edge-of-ai-cybercrime.md
Podcast: [Risky Business Features](https://stenobird.com/podcast/risky-business-features-7716365)
Published: 2026-07-16T07:10:56+00:00
Episode link: https://risky.biz/RBFEATURES32/
Audio file: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBFEATURES32.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/risky-business-features-7716365/episodes/fortibleed-the-bleeding-edge-of-ai-cybercrime
Duration seconds: 2883

## Resource

In this podcast episode SOCRadar CISO Ensar Seker and James Wilson chat about the company’s deep dive into the Fortibleed campaign. A small investigation into a curiously open directory on an unknown server expanded into the discovery of an attack that targeted 400,000 Fortinet devices. As Ensar says, each time the SOCRadar team pulled a single thread, it led to a tapestry of AI-enabled cybercrime. They uncovered custom initial access, persistence and packet sniffing tools, as well as direct links to the INC and Lynx ransomware operations. Most interesting though is the use of AI to design, implement and operate all aspects of the campaign across a team of 20 individual actors. Operating more like a modern software company than a traditional cybercrime gang, Fortibleed serves as our first in-depth look at the future of cybercrime.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/risky-business-features-7716365/episodes/fortibleed-the-bleeding-edge-of-ai-cybercrime/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/risky-business-features-7716365/fortibleed-the-bleeding-edge-of-ai-cybercrime.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.