Trusted Infrastructure, Security-Appliance, and Software Supply-Chain Compromise

FBI and Secret Service warnings support the assessment that FortiBleed is an active, ransomware-linked campaign affecting roughly 86,000 Fortinet devices across 194 countries through credential abuse and attacker-created accounts. The FakeGit campaign's reported 17,000-plus malicious repositories, MALFEX packages, exposed-server compromise, counterfeit TLS certificates, Android firmware malware, and contractor patching failures reinforce the need for provenance checks, inventory, patch verification, credential rotation, and independent telemetry.