The active exploitation of Fortinet FortiWeb vulnerabilities underlines the need for improved oversight in cybersecurity risk management.