Hackers Exploit FortiClient EMS Flaw to Deploy EKZ Credential-Stealing Malware

  Cybersecurity researchers have uncovered active attacks exploiting a critical vulnerability in FortiClient Enterprise Management Server (EMS) to distribute a previously undocumented credential-stealing malware known as EKZ Infostealer. The attacks leverage CVE-2026-35616, an authentication bypass flaw in FortiClient EMS that…