The Covid-19 pandemic led many businesses to use virtual private networks (VPNs) for remote and hybrid work. This drove cybercriminals to increasingly target remote access security vulnerabilities and launch VPN attacks, according to the 2022 VPN Risk Report from zero trust security company Zscaler.
Key takeaways from Zscaler's report include:
- 95% of companies are using a VPN, and 61% have three or more VPNs globally.
- 71% are concerned that their VPN may jeopardize their ability to keep their environment secure.
- 44% have witnessed an increase in exploits targeting their business' VPN after shifting to remote and hybrid work.
Furthermore, 97% of companies said they understand that their VPNs are vulnerable to cyberattacks and exploits, the Zscaler report indicated. Regardless of the risk, these businesses still leverage VPNs.
Companies Are Concerned About Internet-Based Attacks
Businesses prioritize ransomware (78%) over all other types of internet-based attacks, according to Zscaler's report. Along with ransomware, companies also are concerned about the following internet-based attacks:
- Social engineering (70%)
- Malware (66%)
- Web applications (49%)
- Distributed denial-of-service (DDoS) attacks (45%)
It only takes one infected device or stolen credential to compromise a network, Zscaler noted. As such, cybercriminals are more likely than ever before to target VPN users in the hopes of gaining access to business networks comprised of many devices.
Zero Trust Security Is a Priority for Businesses
The adoption of zero trust network access (ZTNA) solutions and zero trust architecture (ZTA) has "gained traction in recent years," Zscaler said. As more companies have hired mobile and remote workers, zero trust adoption has become a priority.
Approximately 80% of companies are adopting or have adopted zero trust security solutions in 2022, Zscaler reported. In addition, 68% said their focus on remote work "accelerated the priority of zero trust projects" within their organizations.
Now, 65% of companies are considering remote access alternatives to traditional VPNs, Zscaler's report showed. Many businesses also are prepared to explore ways to empower hybrid and remote workers. This could lead more companies to adopt zero trust security solutions in the near future.
