One allows a remote attacker to execute arbitrary code inside a sandbox, the other could result in loss of sensitive ...
The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.