It's DNS. It's always DNS... (except when it's AI)

I know an elite DFIR team that can investigate this, Bluesky

What happens when the FortiGate next-generation firewall protecting your network becomes the backdoor? 🚪

Our DFIR team has been tracking a wave of FortiGate NGFW compromises. The worst part? Most organizations lack the log retention to see how it happened. 🧵👇