#hashpwn — Public Fediverse posts

hashgen v1.3.2 is out!

v1.3.2 brings 37 new modes since the last published release.

These include KoreLogic’s CMIYC 2026 $cmiyc$2026$ algo, gost-yescrypt, Streebog, LDAP SHA/SSHA, nested modes, multiple bcrypt modes, sm3crypt, the entire MD6 family, plus more.

More info:
https://forum.hashpwn.net/post/89

#hashgen #cmicy #korelogic #gostyescrypt #streebog #ldap #ssha #bcrypt #sm3crypt #md6 #hashpwn #hash #algo

FortiBleed: The ongoing Fortinet / FortiGate compromise campaign

Fortinet edge devices are being targeted in a large-scale compromise campaign involving exposed management interfaces, FortiCloud SSO abuse, credential theft, brute forcing, config exports, and suspicious admin account creation.

This should be treated as a compromise-assessment event, not just a normal patch cycle.

Admins should patch FortiOS, review all local admin accounts, rotate credentials and shared secrets, check for config exports, enforce MFA, and restrict management access to trusted IPs or VPN-only access.

Full details:
https://forum.hashpwn.net/post/14105

#fortinet #fortigate #fortibleed #fortios #forticloud #cybersecurity #vpn #hashpwn

Storm-1175 is hitting orgs with chained zero-days and dropping Medusa ransomware in under 24 hours.

Full write-up: https://forum.hashpwn.net/post/12014

#cybersecurity #storm1175 #zeroday #medusa #ransomeware #windows #news #hashpwn