Attackers target critical FortiSandbox flaws as CISA issues patch ord…

CISA has issued a mandatory patch order for critical command injection vulnerabilities in Fortinet FortiSandbox after attackers began exploiting the flaws in the wild. The vulnerabilities allow remote code execution and have been added to the actively exploited list. If you sell to government, healthcare or critical infrastructure, your customer's FortiSandbox just became a mandatory patch—CISA deadlines are enforceable. That's a support spike and a sales motion for security teams who need to prove completion.