ctipilot.ch

Home · Briefs · CTI Weekly Summary — 2026-W26 (Jun 22 – Jun 28, 2026)

The Gentlemen (`key: the-gentlemen`)

From CTI Weekly Summary — 2026-W26 (Jun 22 – Jun 28, 2026) · published 2026-06-29

The W25 multi-day item now has primary-evidence depth (the ESET deep-dive, § 7) and a sharp Swiss angle: Check Point data, reported by Swiss tech press, makes Switzerland the second-most-targeted European country for the operation, which now claims 478 victims and has added worm propagation. The operationally important link is that victim selection runs on FortiGate misconfiguration scanning — so a Swiss organisation's FortiBleed exposure (above) is also its Gentlemen-victim-selection exposure. Outstanding for defenders: the same FortiGate hardening that closes FortiBleed reduces Gentlemen targeting, and EDR-tamper-protection plus driver-blocklist enforcement is the GentleKiller counter.