FortiGate Firewall and VPN Concentrator Compromised

The FortiGate device at the wind farm was exploited due to an internet-exposed VPN without MFA, allowing the attacker to gain administrative access and pivot into the network.