About this episode

The episode explores the Fortibleed campaign, highlighting the use of AI in modern cybercrime and its implications for cybersecurity.

In this podcast episode SOCRadar CISO Ensar Seker and James Wilson chat about the company’s deep dive into the Fortibleed campaign. A small investigation into a curiously open directory on an unknown server expanded into the discovery of an attack that targeted 400,000 Fortinet devices. As Ensar says, each time the SOCRadar team pulled a single thread, it led to a tapestry of AI-enabled cybercrime. They uncovered custom initial access, persistence and packet sniffing tools, as well as direct links to the INC and Lynx ransomware operations. Most interesting though is the use of AI to design, implement and operate all aspects of the campaign across a team of 20 individual actors. Operating more like a modern software company than a traditional cybercrime gang, Fortibleed serves as our first in-depth look at the future of cybercrime.

People in this episode

Host: James Wilson

Guest: Ensar Seker

Topics covered

• AI cybercrime
• Fortibleed campaign
• cybersecurity
• ransomware
• cybercrime tools
• Fortinet devices

Keywords

• AI
• cybercrime
• Fortibleed
• Fortinet
• ransomware
• SOCRadar
• cybersecurity tools

Mentioned in this episode

Organizations: SOCRadar, Fortinet, INC, Lynx

Products: Fortibleed

More episodes of Risky Business Features

• What to do 'til the bugpocalypse gets here · July 10, 2026 · 44 min
• Mythos on your desk? Using local LLMs for code reviews · June 30, 2026 · 1h 11m
• Pitching security startups to VCs in the AI era · June 23, 2026 · 35 min
• How using open weight models can blow up in your face · June 19, 2026 · 43 min
• The state of the art in AI model jailbreaks · June 16, 2026 · 53 min

Explore listener stats, chart rankings, contacts and more on the Risky Business Features podcast page.