FortiGate Edge Intrusions | Stolen Service Accounts Lead to Rogue Workstations and Deep AD Compromise

Attackers exploited FortiGate firewall vulnerabilities to steal service account credentials, enabling them to enroll rogue workstations, deploy remote management tools, and deeply compromise Active Directory environments while evading detection due to insufficient logging.