Back in March 2020, at the start of the first lockdown, companies scrambled to increase their remote access capacity as employees started working from home where possible, and this increase in remote working, virtual collaboration and rapid deployment of new tools did of course also increase the attack surface.
In particular, VPNs need special attention such as two-factor authentication, because if compromised they can give an attacker a tunnel into the heart of your environment, particularly if users authenticate using their normal domain logon.
