And so? This is true for any kind of infra!
replyYou can't defend yourself from everything, but you can try to make you life easier by reducing the attack surface and make side movements more difficult.
Having employees (or system like bastion hosts) with unrestricted access is one of the recurring mistakes in such events. I can’t understand it.
replyZero Trust is expensive to implement and the business people hear "at the end, the systems will ideally work as good as before".
replyIt will take a few bankruptcies until security is taken seriously.