Sunday 05 July 2026 21:32:46 GMT+02:00
Netcrook
#EKZ malware
The Management Plane Became the Payload: FortiClient EMS and the Fake Patch Trap
A critical FortiClient EMS flaw tied to CVE-2026-35616 turned trusted administration into a delivery path for a malicious patch and credential-stealing malware.
The Control Plane Became the Weak Point: FortiClient EMS Flaw Turned Trust Into a Delivery Channel
A management-server vulnerability tied to FortiClient EMS shows how one authorization failure can ripple across a fleet of protected devices without needing noisy endpoint exploits.