The VPN was retired on paper.
That is not the same thing as being gone.
Legacy access paths have a nasty habit of surviving architecture updates, migration plans, and confident diagrams. The Check Point IKEv1 case is useful because it points at a larger defender problem: attackers are not only chasing fresh bugs. They are testing whether yesterday’s compatibility debt still works today.
That is where “deprecated” becomes dangerous. It sounds like a status label. In production, it may still be an exposed access path waiting for the right actor to ask the right question.
The real lesson is not just “patch faster.” It is: prove the old path is dead before the adversary proves it is alive.
Read the full AlphaHunt analysis.