Throughout early 2026, SentinelOne’s® Digital Forensics & Incident Response (DFIR) team has responded to several incidents in which FortiGate Next-Generation Firewalls (NGFW) have been compromised to establish a foothold in the targeted environment. Each incident was detected and stopped during the lateral movement phase of the attack. Fortinet disclosed and issued patches for several high-severity vulnerabilities, allowing unauthorized access during our investigation period. Successful explo
