FOFA is a tool tracked by ThreatCluster, appearing in 5 threat clusters built from 7 intelligence report mentions.
FOFA is a tool tracked across 5 threat clusters and 7 intelligence report mentions on ThreatCluster. First observed November 18, 2025; most recent activity August 2, 2026.
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
Between 2018 and 2023, Bulgaria licensed the export of surveillance technology from Circles, a company linked to NSO Group, to various countries with histories of human rights abuses. Human Rights Watch revealed that…
A Chinese-speaking threat actor, identified as knaithe/KnYuan, executed an autonomous cyberattack campaign using DeepSeek AI and the Hermes Agent framework. The campaign targeted over 460 servers, attempting to exploit…
Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…
A study by Flashpoint reveals that the time to exploit vulnerabilities has decreased from 745 days in 2020 to just 44 days in 2025. This significant reduction is attributed to the rise of n-day vulnerabilities, which…
FOFA is a tool tracked by ThreatCluster, appearing in 5 threat clusters built from 7 intelligence report mentions.
The most recent intelligence report mentioning FOFA on ThreatCluster is dated August 2, 2026. Activity was first observed November 18, 2025, giving a tracked span from then to August 2, 2026.
Across ThreatCluster reporting, FOFA most frequently co-occurs with Knaithe/KnYuan, Lazarus, Data Breach, Malware, Zero-day Exploit, among 12 tracked related entities.
The most significant recent cluster is “FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation” (100 articles · Updated November 15, 2025). FOFA appears across 5 threat clusters in total, listed above with sources.
FOFA appears in 7 intelligence report mentions across 5 deduplicated threat clusters, aggregated from 17,000+ monitored sources.