Vulnerabilities in Business VPNs: A Worrying Trend

In the fast-evolving world of cybersecurity, staying informed is critical. Recent insights from At-Bay’s 2025 InsurSec Report have spotlighted a notable concern: the mounting risks tied to traditional business VPN systems, especially those from major players like Cisco and Citrix. These systems are increasingly targeted by ransomware attacks, setting off alarms for organizations relying on them.

Digging into the numbers, businesses using these aging on-premise VPN platforms are reportedly 6.8 times more vulnerable to ransomware than those who have moved away from these setups. The findings are based on a well-rounded examination of data spanning over a century of cumulative experience across 40,000 insured businesses in the U.S. during 2024 and early 2025.

Cloud-Based Solutions: A Safer Path

The driving force behind this concerning trend? The complex nature of maintaining these outdated VPNs. Many experts now recommend a shift towards modern, cloud-based remote access tools that promise better security and less risk of ransomware.

Adam Tyra, At-Bay’s CISO, puts it succinctly: companies clinging to older solutions should transition to more secure cloud technologies. The report further notes that SonicWall users faced a 5.8 times higher risk following a surge in Akira ransomware, while other systems like Palo Alto and Fortinet trailed not far behind.

The crux of the issue remains the difficulty in maintaining these products. Missed updates and obsolete configurations leave doors wide open for attacks. Alarmingly, 80% of ransomware breaches start with compromised remote access, and 83% involve VPNs. The call is clear—businesses must reassess their VPN strategies to safeguard against these increasing threats.

Secure your business against evolving cyber threats with proactive measures. Visit Qsentinel and explore advanced security solutions to protect your digital assets today!

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.