Blog
FortiClient EMS Exploited: Inside the Attack Chain and Post-Exploitation Tactics
Soon after CVE-2023-48788 was publicly disclosed in late March 2024, Darktrace began to see compromises in FortiClient EMS devices on customer networks. Read on to find out more about what our Threat Research team uncovered.