Corero is highlighting the security risks associated with virtual private network access, warning that VPNs can create an entry point into corporate networks when they are not properly secured and monitored.
VPNs are widely used by businesses to provide employees, contractors and other authorised users with remote access to internal systems. As remote and hybrid working have become established, VPN infrastructure has become an important part of many organisations’ network security arrangements.
However, providing remote access also creates an additional point that attackers can attempt to exploit. Compromised credentials, vulnerabilities in VPN software and poorly protected access points can allow unauthorised users to gain access to systems that would otherwise be protected behind corporate security controls.
Corero’s focus is on the need to treat VPN access as part of the wider network security environment rather than as a standalone security measure. A VPN can protect communications between an authorised user and a corporate network, but it does not by itself guarantee that the person or device connecting to the network is safe.
Attackers can obtain legitimate login credentials through phishing, credential theft and other methods. Once valid credentials have been compromised, traditional access controls can make it difficult to distinguish between a genuine employee and an attacker using the same credentials.
This makes monitoring network activity an important part of protecting remote access. Unusual connection patterns, unexpected traffic and attempts to access systems outside a user’s normal requirements can provide indicators of potentially malicious activity.
Corero specialises in distributed denial-of-service protection, providing technology designed to detect and mitigate malicious network traffic. Its approach focuses on identifying harmful traffic in real time and preventing attacks from overwhelming networks and connected services.
Corero Network Security plc (LON:CNS) is a global provider of automated business continuity and network security solutions.
