“Attackers have realised that the majority of perimeter-exposed products aren’t ‘secure by design’, and so vulnerabilities can be found far more easily than in popular client software.”
The UK’s NCSC is telling organisations to pull VPNs, firewalls and file transfer boxes off the internet unless the vendor can prove they are secure. These are the products sold as protection, and they have worse logging than the laptops behind them. The Ivanti Connect holes sat in the extra portals and management interfaces nobody needed. The security industry’s flagship appliances are now the easiest way in.