FortiBleed isn't one incident — it's two datasets sharing a name. We trace the credentials back through years of Fortinet's own CVEs, a hashing upgrade that doesn't auto-apply, and ask why nobody at the company is paying for it.