I was the idiot who made the jump. While on VPN, no less. My work laptop has both GlobalProtect and Cisco installed as VPN clients. The GlobalProtect client broke but the Cisco client works fine - both require two factor authentication.

Everything seems to work so the unnecessary risk I took didn't cause too much harm.

Ah ok so 3rd party software not yet ready for new kernel. I thought apple dropped support for pptp or something of the like, esp with the IPSec comment in the thread.