Weak authentication and poor segmentation enabled privilege escalation from VPN access to full domain control.

Poor network segmentation enabled an attacker to pivot from internal access to full cloud takeover.

A threat model helped prioritize vulnerabilities, leading to the identification of a phishing attack chain that bypassed MFA and allowed unauthorized …