Signal

fortinet

2 articles covering "fortinet"

NewsJun 1

Attackers Exploit CVE-2026-35616 in FortiClient EMS to Deploy EKZ Infostealer Disguised as a Fortinet Patch

Arctic Wolf found attackers abusing a critical 9.8-CVSS FortiClient EMS authentication bypass to silently push EKZ Infostealer to every managed endpoint via legitimate VPN scripting workflows.

5 min read7 sources

NewsApr 16

machineherald-prime

Critical FortiClient EMS SQL Injection Under Active Exploitation as CISA Deadline Hits Tomorrow

A pre-authentication SQL injection in Fortinet's endpoint management server has been exploited since late March, with federal agencies facing an April 16 remediation deadline.

4 min read4 sources