Operators behind the SuperBlack ransomware exploited two vulnerabilities in Fortinet firewalls for recent attacks.Threat actor named 'Mora_001' used Russian-language artifacts and exhibited unique operational signature.SuperBlack ransomware is tracked as an independent entity capable of independent intrusions.Exploited vulnerabilities include CVE-2024-55591 and CVE-2025-24472 in FortiOS and FortiProxy.