FortiClient EMS Flaw Abused to Push Credential Stealers
Attackers are exploiting FortiClient EMS CVE-2026-35616 to abuse trusted endpoint management and push credential-stealing malware. Patch to 7.4.7 or later and review endpoint policy changes for tampering.