u/mrkhan20_06

I'm still learning cybersecurity, and one thing I've realized is that there are so many different paths - networking, Linux, scripting, web security, malware analysis, cloud security, digital forensics, and more.

Looking back, what's one skill, concept, or tool you wish you had focused on much earlier in your journey?

It could be something technical like:

• Linux
• Networking
• Python
• Active Directory
• Burp Suite
• Wireshark
• Nmap

Or even something non-technical like documentation, note-taking, building a home lab, or participating in CTFs.

I'd love to hear what made the biggest difference for you and what advice you'd give to beginners starting today.

I'll say Metasploit.

Don't get me wrong, it's powerful and industry standard. But beginners treat it like a magic button without understanding what's actually happening under the hood. You're just running modules without knowing the exploit, the payload, or why it works.

Real learning happens when you understand the attack manually first. Metasploit should come after that, not before.

What are your Opinions?

FortiBleed: 86,000 Firewalls Hacked - And Most Victims Don't Even Know Yet 🔥

If you're into network security or just getting started in cybersecurity, this is one of the biggest stories of 2026 so far - and it's still developing.

What happened?

A massive credential theft campaign called FortiBleed has compromised over 86,000 Fortinet FortiGate firewall and VPN devices across 194 countries. That's roughly 50% of ALL internet-facing Fortinet firewalls in the world.

The attackers - believed to be Russian-speaking threat actors - didn't use a fancy zero-day exploit. They did it the old-fashioned way: brute force + reused credentials + no MFA. They ran over 1.16 BILLION credential attempts against FortiGate targets until they got in.

Here's what makes it scary:

- The stolen credentials are already circulating on dark web forums

- Many affected organizations still haven't patched or even noticed

- Targets include government agencies, hospitals, financial institutions, and critical infrastructure

- CISA had to issue an emergency alert on June 18 telling organizations to act immediately

How did they pull it off?

Attackers scanned the internet for exposed FortiGate management interfaces, pulled configuration files, cracked the password hashes using a 45-GPU cluster, then tested each credential automatically. Clean, systematic, massive scale.

The lesson here (and it's an old one):

- Enable MFA. Always.

- Never expose your firewall management interface to the public internet.

- Rotate credentials regularly - especially after ANY security incident.

- Patch your stuff. Old unpatched credentials from previous incidents is literally how this campaign worked.

This isn't some advanced nation-state attack nobody could've stopped. Most of these 86,000 organizations could have prevented it with basic hygiene.

What do you think - is it shocking that half of Fortinet's internet-facing firewalls fell to something this "simple"? Drop your thoughts below 👇

Hey everyone 👋 — I'm Rehan, the person behind this community. Let me finally introduce myself properly.

I realized I've never actually told you all who I am or why I started r/cyberterminal — so here goes.

I'm a Computer Engineering student from Ahmedabad, India, currently obsessed with cybersecurity and networking. Like a lot of you, I started from zero — no fancy courses, no mentors, just YouTube rabbit holes and late nights reading documentation I barely understood.

About a year ago I decided to stop just consuming content and start creating it. I built a blog called CyberTerminal (cyberterminal.tech) where I write about cybersecurity, ethical hacking, networking, and cloud computing — all in a way that actually makes sense for beginners. No fluff, no paywalls, just straightforward content.

I also created this subreddit so people learning the same things could have a space to ask questions, share resources, and grow together.

I'd love to hear from you

- Who are you and what are you currently learning in cybersecurity?

- If you've visited CyberTerminal, what did you think? Be brutally honest — good or bad, I want to know.

- What kind of content would you actually want to see here on the subreddit?

This community is only as good as the people in it. Let's actually make it something worth being part of. 🔐