The defect impacts a popular collection of business applications that attackers have hit before in widespread attack sprees.

Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple sources, not a single campaign.