Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively exploited.
Moving up the ranks is a malware that plays dead until it's ripe to strike.