When we analyze the attacks that are currently happening, we will clearly see an upward trend. It is important to know what types of misconfigurations could be at the beginning of the attack. During the presentation Paula will be demoing various examples kill-chains, most of them taken from practice. Kill-chains represent realistic but also surprising infrastructure take overs, they usually start with user or even no privileges. Demonstrations will be followed up with zero trust approach for administrative accounts, implemented according to best security practices. This talk will investigate the newly emerging attacks, as well as various case-studies on how currently the kill-chain looks like. Participants will receive ready-to-launch approach to mitigate the most deadly cybersecurity issues.