The powershell script is a minor part of the screw up. The real issues are multitude...
1) hardcoding actual production credentials in a script at all. Seriously what the fuck.
2) Thycotic not enforcing MFA for the keys to the kingdom admin account. Even my cellphone provider has better security.
The root cause is likely the assumption that the VPN is sacred. This needs to die asap - your internal network should assume the VPN is wide open and secure everything accordingly. Defense in depth not eggshells.
1) hardcoding actual production credentials in a script at all. Seriously what the fuck.
2) Thycotic not enforcing MFA for the keys to the kingdom admin account. Even my cellphone provider has better security.
The root cause is likely the assumption that the VPN is sacred. This needs to die asap - your internal network should assume the VPN is wide open and secure everything accordingly. Defense in depth not eggshells.