Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / IT Operations

IT Operations

Attacks on Business VPNs are Increasing

Attacks on Business VPNs are Increasing

Randy Hall By Randy Hall Updated Jul 2024 2 min read Share

Virtual private networks (VPNs) are used to give users remote access to resources on corporate networks. However, several factors have revealed incompatibilities between VPNs and Zero-Trust security systems.

Businesses are worried that VPNs are becoming a severe threat to their operations. According to a report by Zscaler, nearly half of information technology professionals have seen an increase in VPN attacks since moving to remote networks.

The Zscaler report surveyed more than 350 information technology experts working with international workforce companies. 65% of businesses are considering VPN alternatives, and 80% of those are actively pursuing a Zero-Trust security strategy.

What is Zero-Trust Security?

According to the Zero-Trust security concept, trust cannot be given to any user, device, or web app. Therefore, unlike a security infrastructure built on a VPN, every data exchange can be considered a threat.

The Zero-Trust security concept is founded on three main ideas. The first step is to verify, authenticate, and approve every connection attempt consistently.

A second step is reducing risks; users and applications should only have the necessary access to complete their jobs.

Finally, a Zero-Trust architecture is created to minimize the impact of attacks and breaches.

Recent high-profile breaches are showing VPNs have become a frequent target of cybersecurity attacks. Using a Zero-Trust architecture can help safeguard against the evolving threat landscape.

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime