The Covid-19 pandemic led many businesses to use virtual private networks (VPNs) for remote and hybrid work. This drove cybercriminals to increasingly target remote access security vulnerabilities and launch VPN attacks, according to the 2022 VPN Risk Report from zero trust security company Zscaler.Key takeaways from Zscaler's report include:Furthermore, 97% of companies said they understand that their VPNs are vulnerable to cyberattacks and exploits, the Zscaler report indicated. Regardless of the risk, these businesses still leverage VPNs.It only takes one infected device or stolen credential to compromise a network, Zscaler noted. As such, cybercriminals are more likely than ever before to target VPN users in the hopes of gaining access to business networks comprised of many devices.
- 95% of companies are using a VPN, and 61% have three or more VPNs globally.
- 71% are concerned that their VPN may jeopardize their ability to keep their environment secure.
- 44% have witnessed an increase in exploits targeting their business' VPN after shifting to remote and hybrid work.
Companies Are Concerned About Internet-Based Attacks
Businesses prioritize ransomware (78%) over all other types of internet-based attacks, according to Zscaler's report. Along with ransomware, companies also are concerned about the following internet-based attacks:- Social engineering (70%)
- Malware (66%)
- Web applications (49%)
- Distributed denial-of-service (DDoS) attacks (45%)




