FORTINET: SYMLINK TRICK GIVES ACCESS TO PATCHED FORTIGATE VPN DEVICES

Summary from the TLDR InfoSec newsletter

Fortinet warns that threat actors can maintain access to FortiGate VPN devices after patching by creating symbolic links to the root file system via SSL-VPN, allowing read-only access. Users should upgrade to the latest FortiOS version to eliminate malicious files and check configurations for unauthorized changes.