Key Takeaways Arctic Wolf observed evidence of CVE-2026-35616 being exploited against FortiClient EMS deployments. The campaign abused trusted endpoint management infrastructure to deliver malware across managed endpoints. Threat actors disguised the credential stealer payload as a Fortinet endpoint update, silently...