Check Your Perimeter

This advisory outlines best practices for securing remote access in a remote-work context: enforce MFA on all internet-facing portals; review and patch VPN/remote access devices for recent flaws; avoid IKE aggressive mode with PSKs; carefully evaluate or reduce split tunneling; harden corporate Wi‑Fi with mutual certificate-based authentication to prevent evil‑twin credential theft; and segment corporate devices on home networks or use always‑on VPN. It highlights attacker techniques such as password spraying and transparent MFA proxying and recommends targeted scanning and reputable tooling to verify exposures.