Researchers tie the latest breaches to incomplete remediation alongside misconfigured SSLVPN features that expand access paths.