The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.