Patch these critical Fortinet sandbox bugs that let attackers bypass login, run commands over HTTP

A high-severity security roundup from The Register covering multiple active and critical incidents: two critical Fortinet sandbox vulnerabilities that can allow unauthenticated authentication bypass and remote command execution over HTTP; a 17-year-old critical Microsoft Excel flaw now under active exploitation (on CISA's exploited list); a months-old zero-day in Adobe Acrobat/Reader used to profile victims; and Microsoft’s large Patch Tuesday that included at least one actively exploited CVE. The feed also highlights widespread supply-chain and agent risks (Trivy/Axios supply-chain incidents,