Vulnerabilities
Ivanti VPN Vulnerabilities Prevention Checklist for Secure Access
Network segmentation and strict certificate validation prevent lateral movement when remote access appliances suffer from unpatched memory corruption bugs.
network segmentation
Everything Threat Times has reported about network segmentation: 2 stories, newest first. Part of our Cloud Security coverage.
Cloud Security
Virtual Private Cloud Checklist for Secure Isolation
Default security groups often allow unrestricted ingress, turning your virtual private cloud into an open door for lateral movement if you skip explicit deny rules.