Hackers are hitting firewalls and VPNs to breach businesses