VPN POST-EXPLOITATION TECHNIQUES IN THE WILD

Summary from the TLDR InfoSec newsletter

This blog explains how VPN post-exploitation techniques can expose user credentials to attackers. Attackers can easily obtain credentials and access critical assets by compromising the VPN. To prevent this, use limited service accounts and dedicated identities for VPN authentication.