Yum..
.. what a lovely list of arguments to declare those pesky VPNs suspect.
Moreover, hacking businesses offers APT scum the cover of a non-blacklisted exit node through which to target organisations: A hacking team stands a better chance at maintaining covert reconnaissance of a target when the packets trace back to a benign company.
The argument to make them even questionable for legitimate businesses.
I'm not saying this is isn't a legit report (and I'm glad they found this), I'm just hinting at the possibility that this may be used in a different way to what you expect.
Biting the hand that feeds IT
