
Not just coronavirus
Coronavirus has certainly increased the number of incidents but the problem is an underlying refusal to start with security and proceed from there.
When I worked remotely the first thing I had to do was install security software on any device I wanted to use. Then I needed to validate myself to the corporate network. With new hires it might be more difficult these days but the principle that you need to be running security software and be authorized by your employer before you get access remains.
Why do companies ignore this? Security software costs money and authorization takes people (who also cost money) and time.