Week in review: FortiBleed is still active, Patch Tuesday forecast

This week's roundup highlights that the FortiBleed campaign against Fortinet FortiGate firewalls and SSL VPN gateways remains active, with a joint FBI and U.S. Secret Service advisory warning that some victim organizations have been locked out of their own appliances; SOCRadar has confirmed over 86,644 compromised devices across 194 countries. Other notable items include active exploitation attempts against a critical Atlassian Data Center flaw (CVE-2026-21589), CISA adding an exploited NetScaler denial-of-service bug (CVE-2026-88779) to its known-exploited list, Microsoft's emergency Exchange Server patch for a mailbox-access vulnerability (CVE-2026-96940), and SonicWall fixing a pre-auth SSRF issue in SMA 1000 appliances (CVE-2026-102255). The digest also previews the October 2026 Patch Tuesday forecast following last month's record 973 CVEs from Microsoft, alongside breach news from Denmark's population registry and ASOS, plus a Dell System Update root-privilege flaw (CVE-2026-86360).